127 matches found
CVE-2020-26061
ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted...
Authentication flaw
ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted...
Nihilistic Password Security Questions
Posted three years ago, but definitely appropriate for the times...
BofA Phish Gets Around DMARC, Other Email Protections
A credential-phishing attempt that relies on impersonating Bank of America has emerged in the U.S. this month, with emails that get around secure gateway protections and heavy-hitting protections like DMARC. The campaign involves emails that ask recipients to update their email addresses, warning...
CVE-2018-20875
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20875
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20881
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...
Design/Logic Flaw
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
PT-2019-10303
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows self XSS in the WHM Security Questions interface. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...
CVE-2018-20875: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface SEC-433...
CVE-2018-20881: Improper Neutralization of Input During Web Page Generation
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page SEC-446...
PT-2019-10310
Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 74.0.8 Description: The issue allows for self-stored XSS on the Security Questions login page. Recommendations: For versions prior to 74.0.8, update to version 74.0.8 or later to resolve the issue...
NETGEAR WiFi Routers JWNR2010v5 and R6080 Authentication Bypass
An authentication bypass vulnerability exists in NETGEAR WiFi Routers. Successful exploitation of this vulnerability allows remote attackers to bypass authentication and retrieve security questions answers...
NETGEAR WiFi Router JWNR2010v5 / R6080 - Authentication Bypass Vulnerability
Exploit for hardware platform in category web applications Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.as...
Netgear WiFi Router JWNR2010v5 / R6080 Authentication Bypass
Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...
Netgear WiFi Router JWNR2010v5 / R6080 - Authentication Bypass
Exploit Title: NETGEAR WiFi Router R6080 - Security Questions Answers Disclosure Date: 13/07/2019 Exploit Author: Wadeek Hardware Version: R6080-100PES Firmware Version: 1.0.0.34 / 1.0.0.40 Vendor Homepage: https://www.netgear.com/support/product/R6080.aspx Firmware Link:...
Facebook’s plain text misstep, and other password sins
Two days after an article by Brian Krebs disclosed that hundreds of millions of Facebook account passwords had been stored in plain text for years, Facebook released a statement indicating they hash and salt passwords, more or less in accordance with industry best practice. Plain text storage of...
CVE-2018-0696
OpenAM Open Source Edition 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors...
Buffer overflow
OpenAM Open Source Edition 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors...
CVE-2018-0696
OpenAM Open Source Edition 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors...