8144 matches found
Improper Access Control
Anope is vulnerable to password reset of suspended accounts. The vulnerability is due to a lack of prevention mechanisms in versions before 2.0.15, allowing the resetting of passwords for suspended accounts...
DEBIAN-CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
UBUNTU-CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-2862
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...
CVE-2024-2862
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...
CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...
CVE-2024-2862
LG LED Assistant exposes an unauthenticated password-reset vulnerability (CVE-2024-2862). The Nuclei template details an endpoint: /api/changePw that accepts requests from localhost and can be triggered by spoofing X-Forwarded-For: 127.0.0.1 to obtain a success response, enabling password resets ...
CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...
CVE-2024-30187
Summary: CVE-2024-30187 affects Anope prior to 2.0.15, where credentials for suspended accounts are not handled securely, enabling password resets to compromise login for suspended users. The issue is documented across multiple feeds (NVD, OSV, Ubuntu USN). What’s affected: Anope 2.0.14 and earli...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
PT-2024-23238 · Anope +3 · Anope +3
Name of the Vulnerable Software and Affected Versions: Anope versions prior to 2.0.15 Description: The issue allows resetting the password of a suspended account. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...
LG LED Assistant 授权问题漏洞
LG LED Assistant is a software from Luckin LG Korea. It is used to set up LED lights. A security vulnerability exists in LG LED Assistant. A remote attacker could exploit the vulnerability to reset an anonymous user's password...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
Anope 安全漏洞
Anope is a set of open source IRC services open sourced by Anope IRC Services. A security vulnerability exists in Anope versions prior to 2.0.15, which stems from a vulnerability that does not prevent an attacker from resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
PT-2024-22495
Name of the Vulnerable Software and Affected Versions LG LED Assistant affected versions not specified Description This issue allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. Recommendations At the moment, there is no...