CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1543: Improper Access Control

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

Twitter Forces Password Reset on Some Exposed Accounts

Twitter has forced a password reset on an unnamed number of accounts exposed this week in a dump of 32.8 million account names and credentials. A Russian hacker known as Tessa88 has been involved in a number of recent password disclosures with Twitter being the most recent. He shared the cache of...

The vulnerability of the Mac OS X operating system allows a hacker to bypass password expiration.

The vulnerability of the Screen Lock function in the Mac OS X operating system exists due to improper handling of user profile passwords. Exploiting this vulnerability can allow an intruder acting locally to reset passwords that have expired...

Uber: Password Reset Does Not Confirm the Existence of an Email Address

issue: 1.click forget password as driver or rider https://login.uber.com/login 2.input an email which not signed up! 3. press reset password. there will be 'We've sent you an email with a link to reset your password.' message. because it can not verify email is signed up or not! I'd tried with my...

CareMonkey SaaS BB #1 - Token Reset Vulnerability

Document Title: =============== CareMonkey SaaS BB 1 - Token Reset Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1873 Video: http://www.vulnerability-lab.com/getcontent.php?id=1926 Release Date: ============= 2016-06-02 Vulnerability...

CareMonkey SaaS BB #1 - Token Reset Vulnerability

Document Title: =============== CareMonkey SaaS BB 1 - Token Reset Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1873 Video: http://www.vulnerability-lab.com/getcontent.php?id=1926 Release Date: ============= 2016-06-01 Vulnerability...

drchrono: Bypassing Password Reset

Open the Password Reset Link Change the link with below Link https://drchrono.com/accounts/password/reset/complete it Show that I change The Password successfully .But I not...

CVE-2016-3084 UAA Password Reset Vulnerability | Cloud Foundry

CVE-2016-3084 UAA Password Reset Vulnerability Low Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry release v236 and earlier versions UAA release v3.3.0 and earlier versions All versions of Login-server UAA release v10 and earlier versions Description The UAA reset password flow is...

Apple OS X El Capitan Screen Lock Security Bypass Vulnerability

Apple OS X El Capitan is an operating system on Apple devices. An unspecified security vulnerability exists in Apple OS X El Capitan Screen Lock, which can be exploited by a local attacker to reset expired passwords in the locked screen state...

CVE-2016-1851: Undefined Security Weakness

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

PT-2016-2104

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.5 Description The issue exists due to the improper handling of password profiles by the Screen Lock feature. This allows a physically proximate attacker to reset expired passwords when the system is in the...

LinkedIn Breach Just Got A Lot Worse: 117 Million New Logins For Sale

Over 117 million LinkedIn user logins are for sale on the black market “The Real Deal” by hacker “Peace” for five Bitcoins $2,280. The breach is tied to an earlier hack on LinkedIn in 2012, when the company originally said 6.5 million accounts had been compromised. The hacker, identified as Peace...

Uber: Self-XSS on partners.uber.com

Hi, I found a reflected XSS vulnerability in password reset page https://partners.uber.com/reset-password. I have tested this vulnerability in the latest Chrome and Firefox browsers. Reproduction Steps: 1- Go to https://login.uber.com/forgot-password and reset password. Then, Click password reset...

Tumblr Requires Password Reset

Yahoo has forced a password reset on Tumblr account holders after it discovered that someone had accessed email addresses, and salted and hashed passwords from early 2013. A Tumblr spokesperson would not disclose who had accessed the data, where it was found, nor how many email addresses were...

phpcms v9 逻辑缺陷导致可重置任意用户密码

No description provided by source...

74cms v3.6 任意密码重置漏洞

No description provided by source...

PT-2016-3242

Name of the Vulnerable Software and Affected Versions Cloud Foundry Runtime cf-release versions prior to 216 UAA versions prior to 2.5.2 Pivotal Cloud Foundry PCF Elastic Runtime versions prior to 1.7.0 Description The issue exists due to a failure to expire password reset links, allowing attacke...

PT-2016-3243

Name of the Vulnerable Software and Affected Versions Cloud Foundry Runtime cf-release versions prior to 216 UAA versions prior to 2.5.2 Pivotal Cloud Foundry PCF Elastic Runtime versions prior to 1.7.0 Description The issue is related to the password change functionality, where failure to expire...