GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

Web hosting giant GoDaddy on Monday disclosed a data breach that resulted in the unauthorized access of data belonging to a total of 1.2 million active and inactive customers, making it the third security incident to come to light since 2018. In a filing with the U.S. Securities and Exchange...

WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress Advanced Forms that allows an authenticated, remote...

ZOHO ManageEngine Remote Access Plus Access Control Error Vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An access control error vulnerability exists in versions of ZOHO ManageEngine Remote Access Plus Server prior to 10.1.2121.1, which stems from a faulty access control. An attacker could use this vulnerability to...

ZOHO ManageEngine Remote Access Plus Password Reset Vulnerability

ZOHO ManageEngine Remote Access Plus, a remote access solution from ZOHO, Inc. is vulnerable to a password reset vulnerability in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132, which stems from an unauthorized password reset mechanism. An attacker could use this...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

Default credentials

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

Team Password Manager aka TeamPasswordManager before 10.135.236 allows password-reset poisoning...

CVE-2021-44037

CVE-2021-44037 concerns Team Password Manager (TeamPasswordManager) before version 10.135.236, with a reported issue of password-reset poisoning. The core vulnerability description in the sources specifies that the product allows password-reset poisoning, but the exact root cause details are not ...

Permissions Required for Service Account to Reset Password of Target Device from PVS console

...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2021-42954

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group non-admin or any guest users, thereby allowing privilege...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

Information disclosure

Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group non-admin or any guest users, thereby allowing privilege...

Default credentials

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2021-42955

The CVE-2021-42955 entry applies to Zoho ManageEngine Remote Access Plus Server on Windows. The vulnerability stems from an unauthorized password reset mechanism in the Remote Access Plus Server Admin account, allowing any non-admin Windows user to reset that password. Affected software is the Re...

CVE-2021-42955

Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account...

CVE-2021-42954

CVE-2021-42954 affects ZOHO ManageEngine Remote Access Plus Server Windows Desktop Binary prior to version 10.1.2121.1. The root cause is incorrect access control due to weak file permissions in the installation directory, allowing full control to the Everyone group. This enables privilege escala...