8195 matches found
CVE-2018-3783
A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...
Niushop open source system mall arbitrary user password reset vulnerability
Niushop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . Niushop open source system mall there is an arbitrary user password reset vulnerability , attackers can modify th...
Privilege Escalation due to Blind NoSQL Injection
Overview Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later. References - HackerOne Report - GitHub Advisory...
Query Injection
flintcms is vulnerable to privilege escalation attacks. The library does not sanitize user input, allowing a malicious user to inject and execute arbitrary MongoDB queries through the password reset page...
IBM API Connect Developer Portal Privilege Gain Vulnerability
IBM API Connect aka APIConnect is a set of integrated solutions for managing the API lifecycle from IBM in the United States. The solution supports creating, running, managing and protecting APIs and microservices, etc. Developer Portal is one of the developer portals. A privilege acquisition...
Authentication flaw
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication TFA while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483...
CVE-2018-1638
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication TFA while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483...
CVE-2018-1638
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication TFA while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483...
Huawei Backup App v6.30.52.12.L - Session Vulnerability
Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-30...
Huawei Backup App v6.30.52.12.L - Session Vulnerability
Document Title: =============== Huawei Backup App v6.30.52.12.L - Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1815 Video: https://www.vulnerability-lab.com/getcontent.php?id=1987 Release Date: ============= 2018-07-29...
Logical Design Vulnerabilities in Jiangsu Jinzhi Education Unified Identity Authentication System
Jiangsu Jinzhi Education Information Co., Ltd. is a well-known provider of informatization services for colleges and universities in China. There is a logical design vulnerability in the Jiangsu Jinzhi Education Unified Identity Authentication System, which can be exploited by an attacker to rese...
Node.js third-party modules: [flintcms] Account takeover due to blind MongoDB injection in password reset
I would like to report a privilege escalation vulnerability in flintcms. It allows to reset a known user password, extract its password reset token and reset its password to then access the account. Module module name: flintcms version: v.1.1.9 npm page: https://www.npmjs.com/package/flintcms...
Logic design flaws in Guangzhou reference app
Guangzhou Reference APP is a new media brand created by Guangzhou Daily Newspaper Group, which is an information platform. There is a logical design vulnerability in Guangzhou Reference APP. An attacker can reset any password and perform unauthorized operations by grabbing packets and blasting...
GHSA-7WPH-FC4W-WQP2 Improper date handling in Django
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...
Improper date handling in Django
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...
Improper date handling in Django
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestamp, which allows remote attackers to cause a denial of service resource consumption via a URL that...
Huawei SafeBox Manager 6.30.057.L - Bypass Vulnerability
Document Title: =============== Huawei SafeBox Manager 6.30.057.L - Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1789 Release Date: ============= 2018-07-18 Vulnerability Laboratory ID VL-ID: ====================================...
SemCms php version V2.7 is vulnerable to arbitrary password reset.
SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms php version V2.7 there is an arbitrary password reset vulnerability, attackers can use this vulnerability to...
CVE-2018-10633
Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the controller...
CVE-2018-10633
Universal Robots Robot Controllers CB 3.1 with SW 3.4.5-100 are affected by CVE-2018-10633 due to hard-coded credentials (CWE-798), which could permit an attacker to reset the controller password. Affected product: CB 3.1, SW 3.4.5-100. Root cause: use of hard-coded credentials. Impact: remote at...