Unverified Ownership

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Unverified Ownership via the administrator-level backend access. An attacker can gain system maintainer access by exploiting this vulnerability with a valid...

Unverified Password Change

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Unverified Password Change through the backend user management interface. An attacker can modify user accounts without needing to verify the current password by...

Unverified Password Change

Overview typo3/cms-setup is an Allows users to edit a limited set of options for their user profile, including preferred language, their name and email address. Affected versions of this package are vulnerable to Unverified Password Change through the backend user management interface. An attacke...

CVE-2025-47938 TYPO3 Vulnerable to Unverified Password Change for Backend Users

TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, the backend user management interface allows password changes without requiring the current password. When an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ksmbdvfsstreamwrite unverified pos resulting in an out-of-bounds write...

CVE-2025-4903

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

CVE-2025-4903 D-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password change

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R68125. This affects the function sub41F4F0 of the file /H5/webgl.asp?tgglport=0&remotemanagement=0&httppasswd=game&execservice=admin-restart. The manipulation leads to unverified password change. It is...

Security update for audiofile

This update for audiofile fixes the following issues: CVE-2019-13147: Fixed NULL pointer dereference in ulaw2linearbuf that could lead to DOS bsc1140031. CVE-2022-24599: unverified user input when processing audio files can lead to information leak bsc1196487. Patch Instructions: To install this...

SUSE-SU-2025:1559-1 Security update for audiofile

This update for audiofile fixes the following issues: - CVE-2019-13147: Fixed NULL pointer dereference in ulaw2linearbuf that could lead to DOS bsc1140031. - CVE-2022-24599: unverified user input when processing audio files can lead to information leak bsc1196487...

WordPress plugin WP Dashboard Notes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

CVE-2025-4552

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploi...

Jenkins plugin WSO2 Oauth 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

ZKTeco ZKBio CVSecurity 信任管理问题漏洞

ZKTeco ZKBio CVSecurity is a series of biometric solutions from the Chinese company ZKTeco. A trust management issue vulnerability exists in ZKTeco ZKBio CVSecurity version 6.4.1R, which stems from a hard-coded key that could lead to unverified JWT token authentication...

PT-2025-26085 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified where the ima get kexec buffer function does not check if the previous kernel's ima-kexec-buffer lies outside the addressable...

CVE-2025-46748

CVE-2025-46748 describes an authenticated user being able to change their password without providing the current password. Multiple connected sources confirm the issue and reference affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software, SEL-5702, SEL-5035...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-46748 Unverified Password Change

An authenticated user attempting to change their password could do so without using the current password...

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...