CVE-2022-28731

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page...

Cross site request forgery (csrf)

A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page...

Information Disclosure

samba is vulnerable to information disclosure. The vulnerability exists due to the incorrect implementation of password reset functionality, allowing an attacker to leak memory information and change other users’ passwords, including admin or crash the application...

Apache JSPWiki 跨站请求伪造漏洞

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet and JSP from the Apache Foundation. security vulnerability exists in versions prior to Apache JSPWiki 2.11.3, which stems from a crafted request on UserPreferences.jsp could trigger a CSRF vulnerability that could be exploite...

PT-2022-19199 · Apache · Apache Jspwiki

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions prior to 2.11.3 Description: A carefully crafted request on "UserPreferences.jsp" could trigger a CSRF issue, allowing an attacker to modify the email associated with the attacked account, and then initiate a reset...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

Default credentials

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames...

CVE-2022-34530

CVE-2022-34530 affects Backdrop CMS v1.22.0. The issue lies in the login and password reset flow, allowing an attacker to enumerate usernames via password reset requests and receive distinct responses based on the username. The provided documents note a low confidentiality impact but do not speci...

PT-2022-22191 · Unknown · Backdrop Cms

Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.22.0 Description: An issue in the login and reset password functionality allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames. Recommendations: For...

Backdrop CMS 授权问题漏洞

Backdrop CMS is an open source content management system CMS. An authorization issue vulnerability exists in Backdrop CMS v1.22.0, which stems from a problem with the login and reset password functionality that allows an attacker to enumerate usernames via a password reset request and a different...

Vulnerabilities fixed in Samba

The developers of Samba have fixed several vulnerabilities in Samba. A malicious party could potentially exploit them to reset passwords outside of established processes, access system data or possibly execute commands within the scope of the Samba server. To be abused, the malicious party must...

Password Reset token returned in Respose to Account takeover.

Description Password Reset token returned in Respose. Then you can set an arbitrary password with the following url: url //auth/reset-password?token=token Proof of Concept...

CVE-2022-30624

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...

Code injection

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...

CVE-2022-30624 Chcnav - P5E GNSS Authentication bypass admin password reset

Browsing the admin.html page allows the user to reset the admin password. Also appears in the JS code for the password...

CVE-2022-30624

CVE-2022-30624 affects Chcnav P5E GNSS. Browsing the admin.html page allows resetting the admin password, and the capability is also present in the JavaScript code for the password. This vulnerability is documented across multiple sources (NVD, CVE List, CNNVD, PRION/PRIO pages, ENISA EUVD) indic...

Chcnav P5E GNSS 授权问题漏洞

Chcnav P5E GNSS is a Global Positioning System from Chcnav Corporation. A security vulnerability exists in the Chcnav P5E GNSS, which can be exploited by an attacker to reset the "admin" password by browsing to the "admin.html" page...

CVE-2021-24655

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password to an arbitrary value of any user knowing only their ID, and gain access to their account...

CVE-2021-24655

The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password to an arbitrary value of any user knowing only their ID, and gain access to their account...