12475 matches found
CVE-2024-44632
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...
CVE-2024-44632
The PHPGurukul Student Record System version 3.20 is vulnerable to SQL Injection within the password-recovery.php script. The root cause is a lack of validation for externally entered SQL statements provided through the id and emailid parameters. An attacker can exploit this flaw to execute illeg...
PHPGurukul Student Record System security vulnerability
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for the id and emailid parameters in password-recovery.php. An attacker can exploit this vulnerability to...
PT-2025-46959
Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record System version 3.20 Description The PHPGurukul Student Record System is affected by a SQL Injection issue. This issue impacts the password-recovery.php script, specifically through the id and emailid parameters...
CVE-2024-44632
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...
EUVD-2024-55085
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php...
PT-2026-51490
Name of the Vulnerable Software and Affected Versions Flowise versions 3.0.7 and earlier Description An authenticated user can change the account email address, which serves as the login identifier and password-recovery channel, via the account profile endpoint. This process occurs without...
Optimus Brokerage Automation Authorization Issue Vulnerability
Optimus Brokerage Automation is an automation management software from Optimus, Turkey. An authorization issue vulnerability exists in Optimus Brokerage Automation versions prior to 1.1.71 that stems from an authorization bypass and weak password recovery mechanism issue that could lead to...
Siemens SIMATIC S7-1500 Insufficient Verification of Data Authenticity (CVE-2021-4122)
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...
Siemens SIMATIC S7-1500 Deadlock (CVE-2024-27032)
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...
Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2021-3537)
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest...
PT-2025-55086
Уязвимость механизма шифрования флеш-памяти XTS-AES с псевдораундами чипа ESP32-C5 связана с отсутствием защиты служебных данных. Эксплуатация уязвимости позволяет нарушителю восстановить ключи AES...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990767)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990767 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects durin...
CVE-2025-12866
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...
PT-2025-47035
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security flaw exists in Edge Project files or Edge Offline Cache files. If an attacker gains read access to these files, they could reverse engineer user passwords—either app-native ...
CVE-2025-12866
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...
CVE-2025-12866
CVE-2025-12866 affects Hundred Plus EIP Plus (enterprise management software). The root cause is a Weak Password Recovery Mechanism that allows an unauthenticated remote attacker to predict or brute-force the password reset link, enabling password resets for any user. Consequences include potenti...
CVE-2025-12866 Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...
EUVD-2025-38730
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...
CVE-2025-12866 Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...