CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

CVE-2024-45981

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

PT-2024-31868 · Scheduler · Scheduler

Name of the Vulnerable Software and Affected Versions: scheduleR version 0.0.18 Description: A host header injection vulnerability allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This enables attackers to arbitrarily reset other users'...

PT-2024-31866 · Meanstore · Meanstore

Name of the Vulnerable Software and Affected Versions: MEANStore version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link, enabling them to reset other users' passwords and compromise their...

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

CVE-2024-45980: Weak Password Recovery Mechanism for Forgotten Password

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

CVE-2024-45982: Improper Access Control

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

CVE-2024-45979: URL Redirection to Untrusted Site

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

MEANStore 安全漏洞

MEANStore is an e-commerce/retail software solution from the individual developer Michael Lynn. A security vulnerability exists in version 1.0 of MEANStore that originates from user interaction with a carefully constructed password reset link, allowing an attacker to obtain a password reset token...

CVE-2024-45980

MEANStore version 1.0 is susceptible to a host header injection vulnerability. This flaw allows an attacker to obtain a password reset token by tricking a user into interacting with a crafted password reset link . Successful exploitation enables attackers to arbitrarily reset other users' passwor...

PT-2024-31867 · Unknown · Bookreviewlibrary

Name of the Vulnerable Software and Affected Versions: BookReviewLibrary version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This is achieved through manipulating the host header, which...

CVE-2024-45980

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

Book Review Library 安全漏洞

Book Review Library is a simple book review library by Shubham Singh, a personal developer. A security vulnerability exists in Book Review Library version 1.0 that originates from user interaction with a carefully constructed password reset link, allowing an attacker to obtain a password reset...

CVE-2024-45981

A host header injection vulnerability exists in BookReviewLibrary version 1.0 . By manipulating the host header, an attacker can craft a malicious password reset link. If a user interacts with this link, the attacker can obtain a password reset token , potentially allowing for unauthorized passwo...

Lines Police CAD 安全漏洞

Lines Police CAD is an easy to set up and use police server from the individual developers at Merrill Lines. A security vulnerability exists in Lines Police CAD version 1.0 that originates from user interaction with a carefully constructed password reset link, allowing an attacker to obtain a...

CVE-2024-45981: URL Redirection to Untrusted Site

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

PT-2024-31865 · Unknown · Lines Police Cad

Name of the Vulnerable Software and Affected Versions: Lines Police CAD version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link, enabling them to arbitrarily reset other users' passwords and...

Mozilla: Information disclosure on password cancel endpoint

The password reset cancellation process disclosed the user's IP address in the email sent to the user upon cancellation. This information disclosure vulnerability was exploited to obtain the IP address of a user by tricking them into submitting the password reset cancellation request...

CVE-2024-8290

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.12 via the WCFMCustomersManageController::processing function due to missing validation...

CVE-2024-8290

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.12 via the WCFMCustomersManageController::processing function due to missing validation...