CVE-2023-35719 ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not...

Liberapay: Password Reset Token Leak Via Referrer

Vulnerability description not provided...

Withdrawn Advisory: Username enumeration attack in goauthentik

Withdrawn Advisory This advisory has been withdrawn due to an incorrect package mapping error. This link is maintained to preserve external references. Original Description Summary Using a recovery flow with an identification stage an attacker is able to determine if a username exists. Impact Onl...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

PT-2023-28831

Name of the Vulnerable Software and Affected Versions KNX Protocol affected versions not specified Description Devices using KNX Connection Authorization that support Option 1 are susceptible to a lockout mechanism issue. An attacker with network access or physical access to the device can utiliz...

PHPJabbers Document Creator 安全漏洞

PHPJabbers Document Creator is an open source document creator from PHPJabbers. A security vulnerability exists in PHPJabbers Document Creator v1.0, which stems from a user enumeration vulnerability during password reset...

Event Booking Calendar 安全漏洞

GZ Scripts Event Booking Calendar is an event booking calendar application from GZ Scripts. A security vulnerability exists in PHPJabbers Event Booking Calendar version v4.0, which stems from a user enumeration vulnerability during password reset...

Yacht Listing Script 安全漏洞

Yacht Listing Script is yacht and boat categorization software. A security vulnerability exists in PHPJabbers Yacht Listing Script version v2.0, which stems from a user enumeration vulnerability during password reset...

Hotel Booking System 安全漏洞

Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version v4.0, which stems from a user enumeration vulnerability during password reset...

Food Delivery Script 安全漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.1, which stems from a user enumeration vulnerability during password reset...

PHPJabbers Callback Widget 安全漏洞

PHPJabbers Callback Widget is a simple PHP script that places a discreet callback button on a website. A security vulnerability exists in version v1.0 of the PHPJabbers Callback Widget that stems from a user enumeration vulnerability when resetting a password...

Restaurant Booking Script 安全漏洞

Restaurant Booking Script is a restaurant reservation system. A security vulnerability exists in PHPJabbers Restaurant Booking Script version v3.0, which stems from a user enumeration vulnerability during password reset...

Car Rental Script 安全漏洞

Car Rental Script is a vehicle rental script from GZ Script open source. A security vulnerability exists in PHPJabbers Car Rental Script version v3.0, which stems from a user enumeration vulnerability during password reset...

Ticket Support Script 安全漏洞

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2, which originates from a user enumeration vulnerability during password reset...

Make an Offer Widget 安全漏洞

Make An Offer Widget is a simple offer application. A security vulnerability exists in PHPJabbers Make an Offer Widget version v1.0, which stems from a user enumeration vulnerability during password reset...

Taxi Booking 安全漏洞

Taxi Booking is a PHP Jabbers open source cab booking software. A security vulnerability exists in PHPJabbers Taxi Booking Script version v2.0, which stems from a user enumeration vulnerability during password reset...

Fundraising Script 安全漏洞

Phpjabbers Fundraising Script is a simple open source Php donation script from Phpjabbers Serbia. It is used for charity fundraising. A security vulnerability exists in PHPJabbers Fundraising Script v1.0, which stems from a user enumeration vulnerability when resetting a password...

Account takeover via password reset

Description An attacker could predict all future password reset tokens due to the use of RandomStringUtils.randomAlphanumeric in PasswordService. An attacker could crack the random number generator RNG seed from a password reset token, then perform password resets on their and the victim’s...

Password Aging With Long Expiration

answerdev/answer is vulnerable to Password Aging With Long Expiration vulnerability. The vulnerability is due to not invalidating/expiring password reset link within a sufficient interval of time. The attacker can reset the password multiple times using the same password reset link and take over...