Legal Robot: Password Reset page Session Fixation

After resetting the password the page session gets fixed. Hope that you get it fixed...

Boozt Fashion AB: Password reset token issue

Hi Team, Step to Repro - Request for password reset link. - Go to email and click on password reset link https://www.boozt.com/eu/en/customer/reset-password/c55ae0b6e00e883238d81e9a5a5d9ff1 - Now remove the token and use the link https://www.boozt.com/eu/en/customer/reset-password Observe that ab...

TP-Link Archer C9(UN) Arbitrary Password Reset Vulnerability

TP-Link Archer C9UN is a wireless router product from China P&L TP-LINK. A security vulnerability exists in the passwdrecovery.lua file in the TP-Link Archer C9UN version V2160517. An attacker can exploit the vulnerability to reset the administrator password...

Legal Robot: [Cross-domain Referer leakage] Password reset token leakage via referer

A security researcher discovered that sensitive information, like password reset tokens could still be leaked to analytics services like Google Analytics or via the Referer sic header. Even though tokens were immediately invalidated, we decided to re-engineer the process to eliminate any...

Password Reset And Recovery

pagekit/pagekit is vulnerable to password reset and recovery. Attackers are able to reset a registered user's password when the debug toolbar is enabled. By doing this, attackers are able to recover the password...

Statamic framework Access Control Error Vulnerability

Statamic framework is a rapid development framework. The framework can have a rapid creation of website pages , create and manage website forms and other features . An access control error vulnerability exists in Statamic framework before 2.6.0, which is caused by the program failing to properly...

Synology DiskStation Manager (DSM) Information Disclosure Vulnerability

Synology DiskStation Manager is an operating system for use on networked storage servers NAS. A security vulnerability in Synology DiskStation Manager forgetpasswd.cgi allows remote attackers to submit a special request to enumerate valid usernames...

Cross site request forgery (csrf)

In SimpleRisk 20170614-001, a CSRF attack on reset.php aka the Send Password Reset Email form can insert XSS sequences via the user parameter...

CVE-2017-10711

In SimpleRisk 20170614-001, a CSRF attack on reset.php aka the Send Password Reset Email form can insert XSS sequences via the user parameter...

CVE-2017-11519

passwdrecovery.lua on the TP-Link Archer C9UNV2160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9UNV2170511...

CVE-2017-11519

TP-Link Archer C9(UN)_V2_160517 is affected by CVE-2017-11519 due to a predictable RNG seed in passwd_recovery.lua, enabling an attacker to reset the admin password over the network. The issue is fixed in firmware C9(UN)_V2_170511. If exploited, impact is administrator password reset; CVSS metric...

PT-2017-12066

Name of the Vulnerable Software and Affected Versions TP-Link Archer C9UN versions prior to V2 170511 Description The issue allows an attacker to reset the admin password by leveraging a predictable random number generator seed in the passwd recovery.lua file. Recommendations For versions prior t...

CVE-2017-11519: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

passwdrecovery.lua on the TP-Link Archer C9UNV2160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9UNV2170511...

wstmall any reset a user's password

No description provided by source...

Logic flaw vulnerability in the latest version of wstmall

WSTMall is a thinkphp framework based on the development of multi-commercial O2O open source system. The latest version of wstmall has a logic flaw vulnerability. Attackers can use the vulnerability to reset the password...

CVE-2017-7673: Improper Restriction of Excessive Authentication Attempts

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection...

WDTV Live SMP 2.03.20 - Remote Password Reset Exploit

Exploit for hardware platform in category web applications WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live...

plus.lefigaro.fr XSS vulnerability

Vulnerable URL: https://plus.lefigaro.fr/connexion/password?done=mailko=%22%3E%3Cscript%3Ealert%28%270p3nBu6B0un7y%27%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

WDTV Live SMP Remote Password Reset

WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live Streaming Media Player and possibly other WDTV systems...

WDTV Live SMP 2.03.20 - Remote Password Reset

WDTV Live SMP 2.03.20 - Remote Password Reset WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live Streaming Medi...