DOBBY Pocket Drone Android App Signature Has Arbitrary Password Reset Vulnerability

Zero Intelligent Control Beijing Intelligent Technology Co., Ltd. is committed to becoming the world's top supplier of intelligent aircraft products and intelligent drone total solutions.DOBBY Pocket Drone is one of the company's products. There is an arbitrary password reset vulnerability in the...

Panasonic Smart Lock Android App Has Arbitrary Password Reset Vulnerability

Panasonic Smart Lock Android App is a smart hardware device. Panasonic Smart Lock Android App has an arbitrary password reset vulnerability. Allows an attacker to change the other party's password simply by knowing their cell phone number and obtain sensitive user information...

Arbitrary Password Reset Vulnerability in Chickie's Travel Android App

Chickie Mobility Android App is an app that provides public bike rental services. There is an arbitrary password reset vulnerability in Qiqi Travel Android APP. It allows an attacker to reset another person's password simply by knowing their cell phone number, and can view any other person's...

Wise Dogs Android App Has Arbitrary Password Reset Vulnerability

Smart Home Dog Android App is an application about wireless access control intercom system,wireless smart home system. Smart Home Dog Android App has an arbitrary password reset vulnerability. Allow attackers only need to know each other's cell phone number to change their passwords, leaking...

Weblate < 2.10.1 Information Disclosure Vulnerability

Weblate is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:weblate:weblate"; if...

Legal Robot: Token leakage by referrer

A security researcher discovered that password reset tokens were leaked to Intercom which provides our support chat interface and Google Analytics. While the time between a user clicking on a password reset link and actually resetting the password is typically quite low, there was still some risk...

Drupal Password Reset Landing Page Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Password Reset Landing Page Module is a password reset page module. An access bypass vulnerability exists in the Drupal Password Reset Landing Page Module. This vulnerability can be...

PHPCMS 'phpcms\modules\member\index.php 'the presence of any of the password reset vulnerability

No description provided by source...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

Design/Logic Flaw

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

CVE-2017-5537 affects Weblate prior to 2.10.1, where the password reset form returns different error messages based on whether the provided email is linked to an account. This behavior enables remote user enumeration via multiple requests. Public reports across multiple sources (SÚSE, OSV, GHSA a...

PT-2017-16566

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2.10.1 Description The issue concerns the password reset form, which provides different error messages based on whether an email address is associated with an account. This allows remote attackers to enumerate user...

CVE-2017-5537: Exposure of Sensitive Information to an Unauthorized Actor

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

Legal Robot: Password reset form ignores email field

A security researcher discovered that the password reset form disregards the email field on the reset form, relying only on the reset token to find the user. However, the email field was only used in a pre-reset validation. While the reset token provides sufficient assurance that the holder of th...

PRLP - Critical - Access Bypass and Privilege Escalation - SA-CONTRIB-2017-030

This module adds a form on the password-reset-landing page to allow changing the password of the user during the log in process. The module does not sufficiently validate all access tokens, which allows an attacker to change the password of any arbitrary user and gain access to their account. In...