8136 matches found
PT-2025-1642 · WordPress · Adforest
Name of the Vulnerable Software and Affected Versions: AdForest theme for WordPress versions up to and including 5.1.6 Description: The issue arises from the plugin not properly validating a user's identity before updating their password through the adforest reset password function. This allows...
ZenML < 0.57.0 Password Reset Brute Force (CVE-2024-4311)
The version of ZenML installed on the remote host is prior to 0.57.0. It is, therefore, affected by an account takeover exposure due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Password' function, allowing them to...
CVE-2024-11717
Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and they are not single use, which means, that during token expiration time an on-path attacker might reuse such a token to...
CVE-2024-11717
CTFd (CTFd project) is affected by CVE-2024-11717. Tokens used for account activation and password resets are interchangeable and are transmitted as GET parameters; tokens are not single-use and can be reused within the expiration window, enabling an on-path attacker to reset a password and take ...
CTFd 安全漏洞
CTFd is a Capture The Flag framework open-sourced by CTFd. A security vulnerability exists in CTFd version 3.7.4 and earlier, which stems from the interchangeable use of account activation and password reset tokens, allowing a man-in-the-middle attacker to reuse such tokens to change a user's...
PT-2024-17207 · Ctfd · Ctfd
Name of the Vulnerable Software and Affected Versions: CTFd versions prior to 3.7.5 Description: The issue concerns tokens used for account activation and password resetting in CTFd, which can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter...
PT-2024-36340 · Kurmi · Kurmi Provisioning Suite
Name of the Vulnerable Software and Affected Versions: Kurmi Provisioning Suite versions prior to 7.9.0.35 Kurmi Provisioning Suite versions 7.10.x through 7.10.0.18 Kurmi Provisioning Suite versions 7.11.x through 7.11.0.15 Description: An issue was discovered in the sendPasswordReinitLink actio...
CVE-2024-12771
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customerpanelpasswordreset' function. This makes it possible for...
CVE-2024-12771 eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customerpanelpasswordreset' function. This makes it possible for...
CVE-2024-12771 eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset
The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customerpanelpasswordreset' function. This makes it possible for...
CVE-2024-12771
CVE-2024-12771 affects the eCommerce Product Catalog Plugin for WordPress. It is a CSRF vulnerability caused by missing nonce validation in customer_panel_password_reset, enabling unauthenticated attackers to reset the password of any administrator or customer account via a forged request if the ...
PT-2024-17730 · WordPress · Ecommerce Product Catalog Plugin
Name of the Vulnerable Software and Affected Versions: eCommerce Product Catalog Plugin for WordPress versions up to, and including, 3.3.43 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the customer panel password reset function...
WordPress eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.43 - Cross-Site Request Forgery to Password Reset vulnerability
Cross-Site Request Forgery to Password Reset vulnerability discovered by shaman0x01 in WordPress Plugin eCommerce Product Catalog versions = 3.3.43...
CVE-2021-26102
A relative path traversal vulnerability CWE-23 in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to...
PT-2024-17513 · WordPress · Crm Wordpress Plugin – Repairbuddy
Name of the Vulnerable Software and Affected Versions: CRM WordPress Plugin – RepairBuddy versions up to 3.8120 Description: The issue arises from the plugin not properly validating a user's identity before updating their email through the wc update user data AJAX action. This allows authenticate...
Unspecified Vulnerability in ABB ASPECT
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that stems from the inclusion of a weak password reset rule vulnerability. An attacker could exploit this vulnerability to gain unauthorized...
CVE-2024-47761 GLPI vulnerable to account takeover via the password reset feature
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue...
CVE-2024-47761 GLPI vulnerable to account takeover via the password reset feature
GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue...
