9783 matches found
CAPTCHA Bypass Vulnerability in FAW-Volkswagen After-Sales Service App Android Version
FAW-VW After-sales Service APP is a software that provides professional after-sales service. Through this software, you can call roadside assistance with one click at anytime and anywhere. The software also provides personal automobile information, online reservation and automobile repair progres...
Logic flaws in the Android version of the Shandong government services app
Shandong government service APP is a government information software created by the Shandong Government Office. The software can release the latest information of Shandong government services in time, support personalized subscription, full-text search function, to provide faster service for the...
Security Advisory - Authentication Bypass Vulnerability in Huawei Honor 5S Smart Phones
Huawei Honor 5S smart phones have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the password and fingerprint of the phone without...
Kanboard Password Reset Vulnerability
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. The...
Kanboard Password Reset Vulnerability (CNVD-2017-28605)
Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. An...
Arbitrary Password Reset and Background Arbitrary File Upload Vulnerability in Wanda Information Food Safety Information Traceability System
Wanda Information Food Safety Information Traceability System is a platform for analyzing and processing the quality and safety data of food enterprises and realizing the functions of information disclosure, public inquiry, diagnosis and early warning, and quality complaint. Wanda Information Foo...
kanboard -- multiple privilege escalation vulnerabilities
chbi reports: an authenticated standard user could reset the password of another user including admin by altering form data...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
Default credentials
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12850
An authenticated standard user could reset the password of other users including the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46...
CVE-2017-12851
CVE-2017-12851 affects Kanboard prior to 1.0.46. An authenticated standard user could reset the administrator password by altering form data in the request, exposing a password‑reset vulnerability in the admin account. Remediation guidance found in public references suggests upgrading to a fixed ...
