8138 matches found
CVE-2024-51037
The CVE affects kodbox v1.52.04 and earlier. A vulnerability in the captcha used by the password reset function allows a remote attacker to obtain sensitive information (information disclosure). The affected component is the captcha feature in password reset; root cause is not detailed beyond the...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
PT-2024-34499 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox versions 1.52.04 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function. Recommendations: For kodbox versions 1.52.04 and earlier, consider...
CVE-2024-51037
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...
IBM Security SOAR 授权问题漏洞
IBM Security SOAR is a product from International Business Machines IBM, formerly known as Resilient. designed to help your security team confidently respond to cyber threats, automate through intelligence, and collaborate through consistency. IBM Security SOAR has an authorization issue...
Palo Alto Expedition 1.2.91 Remote Code Execution Exploit
This Metasploit module lets you obtain remote code execution in Palo Alto Expedition versions 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the second vulnerability, CVE-2024-9464, is an authenticated OS command injection. In a defau...
Password Reset Attack
yeswiki/yeswiki is vulnerable to weak cryptographic algorithm. The vulnerability is due to poor cryptographic practices, specifically the use of a weak cryptographic algorithm and a hard-coded salt for hashing the password reset key, allowing attackers to recover the reset key and gain unauthoriz...
Palo Alto Expedition 1.2.91 Remote Code Execution
class MetasploitModule 'Palo Alto Expedition Remote Code Execution CVE-2024-5910 and CVE-2024-9464', 'Description' = %q Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the...
CVE-2021-27704
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...
CVE-2021-27704
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...
CVE-2021-27704
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...
CVE-2021-27704
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...
CVE-2021-27704
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...
PT-2024-10910 · Appspace · Appspace
Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue is related to Incorrect Access Control via the Appspace Web Portal password reset page. This allows potential exploitation. The estimated number of potentially affected devices worldwide is not...
CVE-2021-27704
Appspace 6.2.4 is affected by an Incorrect Access Control in the Web Portal password reset page. Root cause stated as an access control error affecting confidentiality (high impact) with CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents. Remedi...
PT-2024-9817 · Crushftp · Crushftp
Name of the Vulnerable Software and Affected Versions: CrushFTP versions 10 through 10.8.2 CrushFTP versions 11 through 11.2.2 Description: The issue is related to a flaw in the password reset mechanism of CrushFTP, allowing a remote attacker to gain access to a user's account and take full contr...
Remitly: [CRITICAL] 0-Click Account Takeover via Password Reset [AUTH-3243] /orchestrator/v1/password_reset/start
The vulnerability discovered allows an attacker to reset the password of a victim's account without requiring any user interaction or special privileges. By intercepting the password reset request and modifying it with the victim's session data, the attacker can successfully take over the account...
CVE-2024-51714
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...
CVE-2024-51714 WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...