Users who call expressReceiveTokenWithData or expressReceiveToken can griefed to pay for fees

Lines of code Vulnerability details Impact A user or service who calls expressReceiveTokenWithData or expressReceiveToken generally waits for an event associated with either callContractWithInterchainToken or sendToken to be emitted on a second chain. When they see this event, they will call...

The vulnerability of the D-Link DIR-823G router’s microprogramming software, related to errors in the password recovery mechanism, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the D-Link DIR-823G router’s microprogramming software is related to errors in the password recovery mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by resetting the password...

CVE-2023-35134 Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only...

CVE-2023-35134 Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only...

AWS Reliability Pillar: Consistent Cloud Architecture

Gain insight into the Reliability pillar of the AWS Well-Architected Framework and best practices for cloud-based operations, including change management and disaster recovery...

Weintek Weincloud

1. EXECUTIVE SUMMARY ​CVSS v3 7.5 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Weintek ​Equipment: Weincloud ​Vulnerabilities: Weak Password Recovery Mechanism for Forgotten Password, Improper Authentication, Improper Restriction of Excessive Authentication Attempts, Improper...

Hitachi Replication Manager 安全漏洞

Hitachi Replication Manager is a complete backup and disaster recovery application from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Replication Manager versions prior to 8.8.5-02. An attacker could exploit this vulnerability to perform a code injection attack...

WordPress Auto Mail - Abandoned Cart Recovery, Newsletter Builder & Marketing Automation for WooCommerce Plugin < 1.1.78 is vulnerable to Cross Site Scripting (XSS)

Software Auto Mail - Abandoned Cart Recovery, Newsletter Builder & Marketing Automation for WooCommerce Type Plugin Vulnerable versions 1.1.78 Fixed in 1.1.78 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1...

The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software lies in the lack of a password recovery mechanism, allowing attackers to circumvent security restrictions.

The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

MGASA-2023-0221 Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

Moxa Tn-5900 User Enumeration Vulnerability

Moxa Tn-5900 is a series of En50155 wall mount routers from China's Moxa MOXA. The Moxa Tn-5900 suffers from a user enumeration vulnerability, which can be exploited by an attacker to determine if a user is valid during password recovery via the web login page, and to conduct a brute force attack...

CVE-2023-3336

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

CVE-2023-3336

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

Privilege escalation

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users...

CVE-2023-3336

TN-5900 Series (version 3.3 and earlier) is affected by a user enumeration vulnerability that could allow a remote attacker to determine whether a user is valid during password recovery via the web login page, potentially enabling brute-force attempts with valid accounts. Multiple sources (CVE-20...

Moxa Tn-5900 安全漏洞

Moxa Tn-5900 is a series of En50155 wall mount routers from China's Moxa MOXA. The Moxa Tn-5900 suffers from a user enumeration vulnerability, which can be exploited by an attacker to determine if a user is valid during password recovery via the web login page, and to conduct a brute force attack...

TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password recovery mechanism. The issue results from reliance...

PT-2023-3386 · Unknown · Tn-5900 Series

Name of the Vulnerable Software and Affected Versions: TN-5900 Series versions 3.3 and prior Description: The issue allows a remote attacker to determine whether a user is valid during password recovery through the web login page, potentially enabling a brute force attack with valid users. This i...