8128 matches found
UBUNTU-CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3 is vulnerable to password reset address forgery because the HTTP Host header is not included in the web server routing process. This allows remote attackers to modify the password reset link. A patch is available in Dotclear 2.10.3; upgrading is recommended. (Affected: Dotc...
U.S. Dept Of Defense: Password reset vulnerability on a DoD website
A password reset vulnerability was found on a DoD website, which could have allowed a malicious user to identify legitimate users and arbitrarily reset their passwords. @sp1d3rs was able to demonstrate this vulnerability by accessing a DoD webpage. Thanks @sp1d3rs!...
U.S. Dept Of Defense: Misconfigured password reset vulnerability on a DoD website
A Department of Defense website was mis-configured such that the password reset function could be bypassed to change a user's password. @mthirup was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks @mthirup!...
BMC Remedy AR System Server Password Reset Vulnerability
BMC Remedy is BMC Software's mobile digital enterprise management platform for IT departments, of which Remedy AR System Server is the server side. A security vulnerability exists in the Remedy AR System Server in BMC Remedy. An attacker can exploit this vulnerability to reset arbitrary passwords...
How to Reset XMS Administrator Password in Microsoft SQL
This article describesHow to Reset XMS Administrator Password in Microsoft SQL...
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
Default credentials
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password...
CVE-2016-2349
The CVE concerns the BMC Remedy AR System Server. Affected product: Remedy AR System Server on BMC Remedy versions 8.1 SP2, 9.0, 9.0 SP1, and 9.1. Vulnerability: attackers can reset arbitrary passwords via a blank previous password. Root cause details are not provided in the supplied documents. I...
Core Remote Elevation of Privilege Vulnerability
Joomla! is a PHP-based open source content management system CMS. Can be used to build commercial Web sites , personal blogs , information management systems , Web services , etc. , but also for secondary development to expand the scope of use . A remote elevation of privilege vulnerability exist...
DailyMotion Hack Leaks Emails, Passwords of 87M Users
DailyMotion, a popular video sharing website, said Tuesday it recently suffered an “external security problem” resulting in the compromise of an unspecified number of its users’ data. LeakedSource.com, a repository of breached data, added DailyMotion to its list of “Hacked Sites” on Monday. The...
Arbitrary Password Reset Vulnerability in ZTE E Academy APP
ZTE E Academy APP is a professional skills learning software. There is an arbitrary password reset vulnerability in ZTE E Academy APP IOS version and Android version. By using a cell phone number to retrieve the password when the SMS verification code is returned directly to the response, you onl...
Ultimate Member < 1.3.76 - Unauthenticated Change Passwords
Ultimate Member versions below 1.3.76 contain a critical security issue that allows unauthenticated users to reset any users password to an arbitrary value...
BlackStratus LOGStorm 4.5.1.35 / 4.5.1.96 Remote Root
!/usr/bin/python logstorm-root.py BlackStratus LOGStorm Remote Root Exploit Jeremy Brown jbrown3264/gmail Dec 2016 -Synopsis- "Better Security and Compliance for Any Size Business" BlackStratus LOGStorm has multiple vulnerabilities that allow a remote unauthenticated user, among other things, to...
b2evolution Arbitrary User Password Reset Vulnerability
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A security vulnerability exists in the 'lost password' feature in b2evolution versions prior to 6.7.9. The vulnerability can be exploited by a remote attacker to reset the password of any user...