Lucene search
+L

9730 matches found

CNNVD
CNNVD
added 2026/02/11 12:0 a.m.10 views

Nsasoft Backup Key Recovery 安全漏洞

Nsasoft Backup Key Recovery is a product key recovery software developed by the US company Nsasoft. Version 2.2.5 of Nsasoft Backup Key Recovery contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration key field, which could lead to a denial-of-servic...

7.5CVSS6.1AI score0.00317EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.19 views

PT-2026-7688

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields...

7.5CVSS5.6AI score0.00282EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.10 views

AVideo 授权问题漏洞

AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...

8.8CVSS5.7AI score0.00232EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.9 views

Nsasoft Backup Key Recovery 安全漏洞

Nsasoft Backup Key Recovery is a product key recovery software developed by the US company Nsasoft. Version 2.2.5 of Nsasoft Backup Key Recovery contains a security vulnerability. This vulnerability stems from a buffer overflow in the Name input field, which could lead to a denial-of-service atta...

7.5CVSS6.1AI score0.00304EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.12 views

Top Password MSN Password Recovery 安全漏洞

Top Password MSN Password Recovery is a MSN password recovery tool developed by Top Password Corporation. Version 1.30 of Top Password MSN Password Recovery contains a security vulnerability; this vulnerability stems from a buffer overflow in the registration code field, which may cause the...

7.5CVSS6.1AI score0.00231EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.8 views

PT-2026-7660

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials...

8.5CVSS5.3AI score0.00676EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.8 views

PT-2026-7692

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash...

7.5CVSS5.5AI score0.00317EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.6 views

PT-2026-7691

ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file...

7.5CVSS5.5AI score0.00383EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.11 views

Top Password Dialup Password Recovery 安全漏洞

Top Password Dialup Password Recovery is a password recovery tool developed by Top Password Inc. Version 1.30 of Top Password Dialup Password Recovery has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which could lead to a denial-of-service attack...

7.5CVSS6.1AI score0.00282EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.11 views

PT-2026-7671

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials...

8.5CVSS5.3AI score0.00232EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.9 views

Top Password ZIP Password Recovery 安全漏洞

Top Password ZIP Password Recovery is a ZIP file password recovery tool developed by Top Password. Version 2.30 of Top Password ZIP Password Recovery contains a security vulnerability, which stems from improper input processing and could lead to denial-of-service attacks...

7.5CVSS5.8AI score0.00383EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.10 views

Top Password MSN Password Recovery 代码问题漏洞

Top Password MSN Password Recovery is a MSN password recovery tool developed by Top Password Inc. Version 1.30 of Top Password MSN Password Recovery has a code vulnerability that stems from XML external entity injection, which may lead to the reading of local system files...

6.7CVSS5.9AI score0.00207EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.12 views

Top Password Firefox Password Recovery 安全漏洞

Top Password Firefox Password Recovery is a password recovery tool developed by Top Password Inc. Version 2.8 of Top Password Firefox Password Recovery has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which could lead to a denial-of-service attack...

7.5CVSS6.1AI score0.00282EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.18 views

PT-2026-7689

Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code...

7.5CVSS5.6AI score0.00282EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.13 views

PT-2026-7508

An attacker with access to the web application ZeusWeb of the provider Microcom in this case, registration is not necessary, but the action must be performed who has the vulnerable software could introduce arbitrary JavaScript by injecting an XSS payload into the ‘Email’ parameters within the...

5.1CVSS5.7AI score0.00227EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.11 views

AVideo 授权问题漏洞

AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...

9.8CVSS5.7AI score0.00676EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/02/10 1:23 p.m.6 views

CVE-2026-22906

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass...

9.8CVSS5.6AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/10 10:15 a.m.11 views

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

6.3CVSS0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 9:58 a.m.4 views

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

6.3CVSS5.4AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/10 9:58 a.m.35 views

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

6.3CVSS0.00267EPSS
SaveExploits0References1
Rows per page
Query Builder