898 matches found
Schneider-electric Modicon Use of Hard-coded Credentials
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file, by prompting the user for a password. This XML...
CVE-2018-4064
An exploitable unverified password change vulnerability exists in the ACEManager upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a unverified device configuration change, resulting in an unverified change of the user password on the...
Logic Flaw Vulnerability at Workbot Forgot Password
Work treasure is a mobile collaborative office platform for enterprises developed by Guangdong Jiamei Technology Co. There is a logic flaw vulnerability in WorkPower's forgotten password, which can be exploited by an attacker to reset any user's password and obtain sensitive information...
WordPress ThemeMakers Accio Responsive Parallax One Page Site Template Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Accio Responsive Parallax One Page Site Template is a responsive one page parallax effect website theme plugin...
WordPress ThemeMakers Car Dealer / Auto Dealer Responsive theme Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Car Dealer / Auto Dealer Responsive theme is one of the car sales website theme plugins used in it. WordPress...
WordPress ThemeMakers Almera Responsive Portfolio theme Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Almera Responsive Portfolio theme is one of the responsive website theme plugins used in it. WordPress ThemeMake...
WordPress ThemeMakers Diplomat|Political theme information leakage vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers Diplomat|Political theme is a theme plugin for diplomatic and political websites. WordPress ThemeMakers Diplomat|Political...
WordPress ThemeMakers Axioma Premium Responsive theme Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Axioma Premium Responsive theme is a responsive website theme plugin used in it. WordPress ThemeMakers Axioma...
WordPress ThemeMakers Invento Responsive Gallery/Architecture Template Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ThemeMakers Invento Responsive Gallery/Architecture Template is a responsive gallery plugin used in... WordPress ThemeMakers Invento...
WordPress ThemeMakers Almera Responsive Portfolio Site Template Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.ThemeMakers Almera Responsive Portfolio Site Template is one of the responsive website theme plugins used in it. WordPress...
PRODSECBUG-2452: User Password is stored in clear
More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...
CVE-2019-3763
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated...
Design/Logic Flaw
An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admin, the password is admin@opm...
CVE-2019-15106
An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admin, the password is admin@opm...
Adive Framework 2.0.7 Cross Site Request Forgery
Exploit Title: Adive Framework 2.0.7 – Cross-Site Request Forgery CSRF Date:02/08/2019. Exploit Author: Pablo Santiago Vendor Homepage: https://adive.es Software Link: https://github.com/ferdinandmartin/adive-php7 Version: 2.0.7 Tested on: Windows and Kali linux CVE :2019-14346 1. Technical...
Cross site request forgery (csrf)
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...
CVE-2019-14346
CVE-2019-14346 affects Schben Adive 2.0.7. The vulnerability is a Cross-Site Request Forgery in Internal/Views/config.php that allows an admin/config CSRF to change a user password due to insufficient validation of request origin. Root cause stated as Web application not adequately validating tru...
CVE-2019-14346
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...
CVE-2019-14346: Cross-Site Request Forgery (CSRF)
Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password...
Default credentials
EspoCRM 5.6.4 is vulnerable to user password hash enumeration. A malicious authenticated attacker can brute-force a user password hash by 1 symbol at a time using specially crafted api/v1/User?filterList filters...