CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-46748

CVE-2025-46748 describes an authenticated user being able to change their password without providing the current password. Multiple connected sources confirm the issue and reference affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software, SEL-5702, SEL-5035...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4558

CVE-2025-4558 affects WormHole Tech GPM (GPM from WormHole Tech). The vulnerability is an Unverified Password Change that allows unauthenticated remote attackers to change any user’s password and then use the modified password to log in. Publicly documented details in connected sources indicate a...

CVE-2025-4558 WormHole Tech GPM - Unverified Password Change

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4552

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

CVE-2025-4552 ContiNew Admin password unverified password change

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

CVE-2025-4552 ContiNew Admin password unverified password change

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

CVE-2025-4552 ContiNew Admin password unverified password change

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

PT-2025-20674 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin versions up to 3.6.0 Description: A vulnerability has been found in ContiNew Admin, allowing for unverified password change. The issue affects an unknown functionality of the file "/dev-api/system/user/1/password". This can be...

CVE-2024-47784 Unverified Password Change

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier...

CVE-2025-3849

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849 YXJ2018 SpringBoot-Vue-OnlineExam studentPWD unverified password change

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849

CVE-2025-3849 affects YXJ2018 SpringBoot-Vue-OnlineExam 1.0 with a vulnerability in the file /api/studentPWD. The manipulation of the parameter studentId enables an unverified password change, and the attack can be initiated remotely. Public reports/entries confirm the existence of this issue acr...

CVE-2025-3849 YXJ2018 SpringBoot-Vue-OnlineExam studentPWD unverified password change

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...