12403 matches found
PT-2026-7690
MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through crafted XML input. Attackers can exploit the 'Favorites' tab by injecting a malicious XML file that references external entities to retrieve sensitive system...
PT-2026-7688
Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields...
PT-2026-7691
ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file...
AVideo 授权问题漏洞
AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...
CVE-2020-37194: Buffer Copy without Checking Size of Input
Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash...
CVE-2020-37191: Buffer Copy without Checking Size of Input
Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code...
CVE-2020-37172: Weak Password Recovery Mechanism for Forgotten Password
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials...
CVE-2020-37193: Buffer Copy without Checking Size of Input
ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file...
CVE-2020-37190: Buffer Copy without Checking Size of Input
Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields...
CVE-2020-37185: Buffer Copy without Checking Size of Input
Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash...
CVE-2020-37215: Buffer Copy without Checking Size of Input
MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and...
Top Password Dialup Password Recovery 安全漏洞
Top Password Dialup Password Recovery is a password recovery tool developed by Top Password Inc. Version 1.30 of Top Password Dialup Password Recovery has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which could lead to a denial-of-service attack...
Nsasoft Backup Key Recovery 安全漏洞
Nsasoft Backup Key Recovery is a product key recovery software developed by the US company Nsasoft. Version 2.2.5 of Nsasoft Backup Key Recovery contains a security vulnerability. This vulnerability stems from a buffer overflow in the registration key field, which could lead to a denial-of-servic...
PT-2026-7671
Name of the Vulnerable Software and Affected Versions AVideo Platform version 8.1 Description The software contains a cross-site request forgery issue that allows attackers to reset user passwords. This is possible by exploiting the password recovery mechanism. Attackers can create malicious...
Top Password MSN Password Recovery 代码问题漏洞
Top Password MSN Password Recovery is a MSN password recovery tool developed by Top Password Inc. Version 1.30 of Top Password MSN Password Recovery has a code vulnerability that stems from XML external entity injection, which may lead to the reading of local system files...
Nsasoft Backup Key Recovery 安全漏洞
Nsasoft Backup Key Recovery is a product key recovery software developed by the US company Nsasoft. Version 2.2.5 of Nsasoft Backup Key Recovery contains a security vulnerability. This vulnerability stems from a buffer overflow in the Name input field, which could lead to a denial-of-service atta...
PT-2026-7660
Name of the Vulnerable Software and Affected Versions AVideo Platform version 8.1 Description The software contains a cross-site request forgery condition that permits attackers to reset user passwords. This is achieved by exploiting the password recovery mechanism, where attackers can construct...
CVE-2020-37192: Improper Restriction of XML External Entity Reference
MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through crafted XML input. Attackers can exploit the 'Favorites' tab by injecting a malicious XML file that references external entities to retrieve sensitive system...
AVideo 授权问题漏洞
AVideo is an open-source broadcast network creation tool developed by the World Wide Broadcast Network. Version 8.1 of AVideo contains an authorization vulnerability, which stems from cross-site request forgery attacks. This vulnerability could allow attackers to exploit the password recovery...
PT-2026-7689
Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code...