WordPress Easy WP SMTP plugin <= 1.4.2 - Unauthenticated Admin Password Reset

Unauthenticated Admin Password Reset vulnerability found by mathieg2 in WordPress Easy WP SMTP plugin versions = 1.4.2. Solution Update the WordPress Easy WP SMTP plugin to the latest available version at least 1.4.3. Attention! Please make sure you have a directory listing disabled since it coul...

Arbitrary Password Reset

Roundcube is vulnerable to arbitrary password resets. The vulnerability existed because of an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin...

WordPress Easy WP SMTP Password Reset

Wordpress plugin Easy WP SMTP versions use auxiliary/scanner/http/wp/easywpsmtp msf undefinedeasywpsmtp show actions ...actions... msf undefinedeasywpsmtp set ACTION msf undefinedeasywpsmtp show options ...show and set options... msf undefinedeasywpsmtp run This module requires Metasploit:...

Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality

Exploit Title: Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality Date: 2020-11-11 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://www.anuko.com/ Software Link: https://www.anuko.com/time-tracker/index.htm Version: 1.19.23.5311 Tested on: Kali Linux 2020....

Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover

Exploit Title: Anuko Time Tracker 1.19.23.5311 - Password Reset Vulnerability leading to Account Takeover Date: 2020-11-11 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://www.anuko.com/ Software Link: https://www.anuko.com/time-tracker/index.htm Version: 1.19.23.5311 Tested on: Kali...

ASB-A-168692734

In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Mblog open source Java blog system has a logic flaw vulnerability

Mblog is a Java language development , support for mysql/h2 database , using spring-boot, jpa, shiro, bootstrap and other popular frameworks for the development of open source free blog system . Mblog open source Java blog system has a logic flaw vulnerability , an attacker can use the...

Logic Flaw Vulnerability in the Account Appeal Function of the Identity Management System of Lianyi Technology Co.

As the security authentication and authorization center of the digital campus, the identity management system provides a series of comprehensive authentication, authorization control and management tools to provide all-round and multi-level licensing, control and management of data access and use...

Nanjing NanSoft Technology Co., Ltd. graduate student management system has a logic flaw vulnerability

Nanjing NanSoft Technology Co., Ltd. graduate management information system is a graduate students and teachers to provide appropriate services, but also students and teachers can also communicate with each other software. A logic flaw exists in the Graduate Management System of Nanjing NanSoft...

How to Reset Password in Veeam Backup for Google Cloud

Challenge You need to reset the password of a Backup Administrator account used to access Veeam Backup for Google Cloud. Solution Before you begin, make sure the IP address of the machine that you are using to reset the password is on the list of allowed IP addresses added to the firewall rules...

Spotify resets some user logins after hacker database found floating online

A team of researchers working for vpnMentor has found a treasure trove in the form of an unsecured Elasticsearch database containing over 380 million records. The trove contained login credentials and other data belonging to Spotify users. So whats Spotify doing leaving its user data hanging arou...

This One Time on a Pen Test: CSRF to Password Reset Phishing

Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part of an ongoing series featuring testimonials of what goes on beneath the hoodie. For more insights, check out our 2020 Under the Hoodie report...

CVE-2020-27422

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account...

CVE-2020-27422

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account...

CVE-2020-27423

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox...

CVE-2020-27423

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox...

Design/Logic Flaw

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox...

Design/Logic Flaw

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account...

CVE-2020-27422

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeover the account...

CVE-2020-27422

CVE-2020-27422 affects Anuko Time Tracker v1.19.23.5311, where the password reset link sent by email does not expire after use, enabling an attacker to reuse the same link to take over a victim’s account. The vulnerability is evidenced in multiple sources (including exploit reports) and is mitiga...