8198 matches found
Cisco Prime Collaboration Provisioning Password Reset Vulnerability
Cisco Prime Collaboration Provisioning PCP is a suite of Web-based, next-generation communications services software from Cisco. A security vulnerability in the Cisco Prime Collaboration Provisioning password reset feature allows remote attackers to exploit the vulnerability by submitting a speci...
Default credentials
Unverified password change vulnerability in Change Password in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to reset password without verification...
CVE-2018-8916
Unverified password change vulnerability in Change Password in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to reset password without verification...
CVE-2018-8916
Unverified password change vulnerability in Change Password in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to reset password without verification...
PT-2018-18714 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2-23739 Description: The issue concerns an unverified password change vulnerability in the Change Password feature. This allows remote authenticated users to reset passwords without proper...
CVE-2018-0318
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
CVE-2018-0318
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
Input validation
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
CVE-2018-0318
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
CVE-2018-0318
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
CVE-2018-0318
Cisco Prime Collaboration Provisioning (PCP) Password Reset Vulnerability (CVE-2018-0318) allows an unauthenticated, remote attacker to gain administrative privileges by abusing weak validation in the password reset function. Affected releases: PCP 11.6 and prior. The issue stems from insufficien...
YzmCMS User Traversal Vulnerability
YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A security vulnerability exists in the password retrieval function of the index.php/member/reset/resetemail.html page in YzmCMS version 3.2 to 3.7, which originates from the validity period of the...
Cisco Prime Collaboration Provisioning Password Recovery Vulnerability
Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...
Cisco Prime Collaboration Provisioning Unauthorized Password Reset Vulnerability
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploi...
Logic Design Vulnerability in LemHealth APP, a Smart Health Bracelet from Synerchip Technology
LemHealth APP is a health management software. A logical design vulnerability exists in the LemHealth APP, a smart health bracelet from Synergy Technology. An attacker can reset any password and perform unauthorized operations by catching packets and intercepting changes...
PHPMyWind 5.5前台存在sql注入，可重置管理员密码
...
How to recover the local username created for the ELM in Azure and reset the password
When you deploy an ELM into Azure, Azure requires that you do not enable the root account for external access. Instead, you are required to specify a name and password for a non-administrative user. If you do not write that username down, or if you lose it, it can be difficult to determine what i...
Peanut Metro WIFI APP has logic design flaws
Peanut Metro WIFI APP is a free wifi software for metro launched by Peanut Technology. There is a logical design vulnerability in Peanut Metro WIFI APP. Attackers can reset any password by forgetting the password function and utilizing packet capture and blasting to obtain the verification code...
Multiple vulnerabilities in Voice of the Customer App for Android
Voice of the Customer APP is a consulting service software for customers of Trina Solar Inc. Voice of Customer APP Android version has information leakage, email bombing, overstepping and resetting arbitrary account password vulnerabilities. The attacker can obtain the information of the register...