New Relic: Unsafe HTML in reset password email and Account verification in email is missing in Sign up

Issue :1 did not receive password reset email, although it looks like newrelic delivered it to gmail. On inspection I can see that the email contains unescaped user input name that might be interfering with delivery. Issue 2 : Account verification in email is missing in Sign up...

KingCMS V9 manage.php 任意用户密码重置漏洞

No description provided by source...

The vulnerability of the Lepide Active Directory Self Service tool, which allows a malicious individual to change the passwords of arbitrary users

The vulnerability of the Lepide Active Directory Self Service tool is related to errors in the implementation of the password reset function. Exploiting this vulnerability could allow an attacker to change the passwords of arbitrary users through a specially created request...

Linode Customer Password Reset, DDoS Attack

Cloud-based webhost Linode absorbed another body blow on Tuesday when it said it was resetting customer passwords after a suspected breach. The development compounded the company’s existing woes as it continues to battle a distributed denial-of-service attack that began on Christmas. A Linode...

Simple PHP Polling System XSS / SQL Injection / Password Reset

Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System. Author : WICS Date : 05-Jan-2016 Software Link : http://sourceforge.net/projects/pollingsystem/ Overview : Simple PHP Polling System helps organizations to make polls of different types of positions with a number of candidates...

Simple PHP Polling System - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System. Author : WICS Date : 05-Jan-2016 Software Link : http://sourceforge.net/projects/pollingsystem/ Overview : Simple PHP Polling System helps organizations to make polls of...

Simple PHP Polling System - Multiple Vulnerabilities

Simple PHP Polling System - Multiple Vulnerabilities Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System. Author : WICS Date : 05-Jan-2016 Software Link : http://sourceforge.net/projects/pollingsystem/ Overview : Simple PHP Polling System helps organizations to make polls of...

Simple PHP Polling System - Multiple Vulnerabilities

Exploit Title : Multiple Vulnerabilities in Simple PHP Polling System. Author : WICS Date : 05-Jan-2016 Software Link : http://sourceforge.net/projects/pollingsystem/ Overview : Simple PHP Polling System helps organizations to make polls of different types of positions with a number of candidates...

Lepide Software Active Directory Self Service Password Reset Vulnerability

Lepide Software Active Directory Self Service is a web-based self-service solution for Active Directory Active Directory Services. Lepide Software Active Directory Self Service does not properly restrict the use of the password reset feature, allowing remote attackers to exploit vulnerabilities t...

astana.gov.kz XSS vulnerability

Vulnerable URL: http://astana.gov.kz/ru/resetting/send-email Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Chec...

Mageia: Security Advisory (MGASA-2015-0486)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2015-0486 Updated mediawiki packages fix security vulnerabilities

Updated mediawiki packages fix security vulnerabilities: In MediaWiki before 1.23.12, an XSS vector exists when MediaWiki is configured with a non-standard configuration, from wikitext when $wgArticlePath='$1' CVE-2015-8622. In MediaWiki before 1.23.12, tokens were being compared as strings, whic...

Updated mediawiki packages fix security vulnerabilities

Updated mediawiki packages fix security vulnerabilities: In MediaWiki before 1.23.12, an XSS vector exists when MediaWiki is configured with a non-standard configuration, from wikitext when $wgArticlePath='$1' CVE-2015-8622. In MediaWiki before 1.23.12, tokens were being compared as strings, whic...

Design/Logic Flaw

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The vulnerability CVE-2015-8267 affects Dovestones AD Self Password Reset prior to 3.0.4.0, where PasswordReset.Controllers.ResetController.ChangePasswordIndex() in PasswordReset.dll fails to properly validate the requesting user. An unauthenticated, remote attacker can reset arbitrary passwords ...

PT-2015-3150

Name of the Vulnerable Software and Affected Versions Dovestones AD Self Password Reset versions prior to 3.0.4.0 Description The issue is related to the PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll, which has inadequate access control. This allows...

CVE-2015-8267: Undefined Security Weakness

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

Dovestones Software AD Self Password Reset 'PasswordReset.dll' Security Bypass Vulnerability

Dovestones Software AD Self Password Reset is a self-service solution for resetting passwords and unlocking user accounts from Dovestones Software, UK. A security bypass vulnerability exists in Dovestones Software AD Self Password Reset 3.0.3.0 and prior versions. An attacker could use this...