CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

CrushFTP 安全漏洞

CrushFTP is a file transfer server from CrushFTP, Inc. A security vulnerability exists in CrushFTP that stems from mishandling the password reset logic, which could lead to an account takeover...

CVE-2024-53552

CrushFTP 10 before 10.8.3 and 11 before 11.2.3 mishandles password reset, leading to account takeover...

CVE-2024-53552

CVE-2024-53552 affects CrushFTP 10 (up to 10.8.2) and 11 (up to 11.2.2); a flaw in the password reset mechanism allows an attacker to reset a user’s password via email and take full control of the account/application. The issue is confirmed in multiple sources and carries a high-severity impact (...

Change Password

This module allows Active Directory users to change their own passwords, or reset passwords for accounts they have privileges over. Module Options msf use auxiliary/admin/ldap/changepassword msf auxiliarychangepassword show actions ...actions... msf auxiliarychangepassword set ACTION msf...

CVE-2024-48845

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02...

ABB ASPECT 安全漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. ABB ASPECT has a security vulnerability that stems from the inclusion of a weak password reset rule vulnerability. An attacker could exploit this vulnerability to gain unauthorized...

PT-2024-22291 · Image Access Gmbh · Scan2Net

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The web application is not protected against cross-site request forgery attacks, allowing an attacker to trick users into performing actions on the...

Logic Flaw Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.

Beijing Zhongqing Modern Technology Co. A logic flaw vulnerability exists in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd. that can be exploited by an attacker to reset arbitrary user passwords...

Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulnerabilities (FIXED)

The Lorex 2K Indoor Wi-Fi Security Camera is a consumer security device that provides cloud-based video camera surveillance capabilities. This device was a target at the 2024 Pwn2Own IoT competition. Rapid7 developed an unauthenticated remote code execution RCE exploit chain as an entry for the...

Metasploit Weekly Wrap-Up 11/29/2024

New module content 4 Acronis Cyber Protect/Backup machine info disclosure Authors: Sandro Tolksdorf of usd AG. and h00die-gr3y [email protected] Type: Auxiliary Pull request: 19582 contributed by h00die-gr3y Path: gather/acroniscyberprotectmachineinfodisclosure AttackerKB reference:...

CVE-2024-11103 Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated...

CVE-2024-11103 Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated...

PT-2024-17368 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management system version 1.0 Description: A critical issue has been found in the PHPGurukul Complaint Management system, affecting unknown code in the /user/reset-password.php file. The manipulation of the email argument...

WordPress Contest Gallery plugin <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover vulnerability

Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover vulnerability discovered by shaman0x01 in WordPress Plugin Contest Gallery versions = 24.0.7...

CVE-2024-11024

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possibl...

CVE-2024-11024 AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possibl...

CVE-2024-11024

Summary (CVE-2024-11024): The AppPresser – Mobile App Framework WordPress plugin is vulnerable to unauthenticated privilege escalation via password reset abuse. An attacker who knows a user’s email can reset that user’s password because the plugin does not validate the password reset code before ...

CVE-2024-11024 AppPresser – Mobile App Framework <= 4.4.6 - Unauthenticated Privilege Escalation via Password Reset

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.4.6. This is due to the plugin not properly validating a user's password reset code prior to updating their password. This makes it possibl...

PT-2024-16713 · WordPress · Apppresser

Name of the Vulnerable Software and Affected Versions: The AppPresser – Mobile App Framework plugin for WordPress versions up to, and including, 4.4.6 Description: The issue is related to privilege escalation via account takeover. This occurs because the plugin does not properly validate a user's...