8193 matches found
Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset
history.pushState'', '', '/'...
Coship Wireless Router 4.0.0.48 4.0.0.40 5.0.0.54 5.0.0.55 10.0.0.49 - Unauthenticated Admin Password Reset
Coship Wireless Router 4.0.0.48 4.0.0.40 5.0.0.54 5.0.0.55 10.0.0.49 - Unauthenticated Admin Password Reset history.pushState'', '', '/'...
CVE-2018-20716
CubeCart before 6.1.13 has SQL Injection via the validate parameter of the "I forgot my Password!" feature...
Arbitrary Password Reset Vulnerability in SeaCMS
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from an arbitrary password reset vulnerability that can be exploited by an attacker to reset passwords...
WordPress JobCareer premium theme <= 2.4 - User enumeration & Password Reset vulnerabilities
User enumeration & Password Reset vulnerabilities found by Anthony MAESTRE in WordPress JobCareer premium theme versions = 2.4. Solution Update the WordPress JobCareer premium theme to the latest available version at least 2.4.1...
Design/Logic Flaw
Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code -- web/reset/index.php, line 51 that can result in Possible to determine password...
CVE-2018-1000884
Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code -- web/reset/index.php, line 51 that can result in Possible to determine password...
CVE-2018-1000884
CVE-2018-1000884 affects Vesta CP prior to 0.9.8-18, where the password reset code in web/reset/index.php (line 51) exposes information due to a timing discrepancy (CWE-208). This can allow an attacker, via unauthenticated network access, to determine password reset codes and potentially change t...
Arbitrary Password Reset Vulnerability in PowerProject Enterprise Project Management System
PowerProject is a WEB-based, enterprise-class, full lifecycle, universal project management platform. An arbitrary password reset vulnerability exists in the PowerProject enterprise project management system. An attacker can exploit this vulnerability to gain direct access to change arbitrary use...
ASUSTOR ADM Password Reset Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A password reset vulnerability exists in ASUSTOR ADM version 3.1.1, which is caused by the program failing to validate the password, and can be exploited by an attacker to change the account password without...
A Breach, or Just a Forced Password Reset?
Software giant Citrix Systems recently forced a password reset for many users of its Sharefile content collaboration service, warning it would be doing this on a regular basis in response to password-guessing attacks that target people who re-use passwords across multiple Web sites. Many Sharefil...
Dell Resets All Customers' Passwords After Potential Security Breach
Multinational computer technology company Dell disclosed Wednesday that its online electronics marketplace experienced a "cybersecurity incident" earlier this month when an unknown group of hackers infiltrated its internal network. On November 9, Dell detected and disrupted unauthorized activity ...
Dell Resets All Customers' Passwords After Potential Security Breach
Multinational computer technology company Dell disclosed Wednesday that its online electronics marketplace experienced a "cybersecurity incident" earlier this month when an unknown group of hackers infiltrated its internal network. On November 9, Dell detected and disrupted unauthorized activity ...
Consona Password Reset Security Bypass Vulnerability
Exploit for php platform in category web applications 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/login.asp", had a commented access to the page that...
Consona Password Reset Security Bypass
Hi!! 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/login.asp", had a commented access to the page that allowed to change the password of any user, with a li...
CMS Made Simple remote password reset (CVE-2018-10081)
A remote password reset vulnerability exists in CMS Made Simple. The vulnerability is due to improper validation of password reset requests...
Multiple loopholes in the cadre online learning platform of Hangzhou Elite Online Education Technology Co.
Hangzhou Elite Online Education Technology Co., Ltd. is a brand of cadre online learning, and has successfully built large-scale cadre education platforms for leading cadres of many organization ministries and other organs in China, providing solutions for all-round intelligent learning. There is...
LAOBANCMS Administrator Password Reset Vulnerability
Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . LAOBANCMS 2.0 has an administrator password reset vulnerability. Attackers can use this vulnerability to reset the administrator password even if...
