moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0022: Web service tokens should be invalidated when the user password is changed or forced to be changed...

zzcms user/check.php has arbitrary user password change vulnerability

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version of any user password change vulnerability, the vulnerability trigger point in /user/check.php, the attacker can take advantage of the vulnerability to...

Uber: Stealing users password (Limited Scenario)

Hello Team, Description : This is report is about an interesting scenario where an user's password can be steal while password reset process due to wired user controlled redirection take place after password reset process. By accepting the fact that URL redirect is not in scope for uber but this...

japones.cl XSS vulnerability

Vulnerable URL: http://www.japones.cl/index.php?q=user/password" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5100722 VIP website status:| No Check japones.cl SSL connection:|...

Microsoft Windows Current Users Last Password Change

Binary data microsoftwindowslastpasswordchange.nbin...

Clear Voyager Hotspot IMW-C910W File Disclosure

Exploit Title: clear voyager hotspot IMW-C910W - file disclosure - Date: 2016/jul/15 - Exploit Author: Damaster - Vendor Homepage: https://www.sprint.com/ - Software Link: https://web.archive.org/web/20150526042938/http://www.clearwire.com/downloads/IMW-C910WV2234R4383A.bin - Version: R4383 - -...

Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure

Exploit for php platform in category web applications - Exploit Title: clear voyager hotspot IMW-C910W - file disclosure - Date: 2016/jul/15 - Exploit Author: Damaster - Vendor Homepage: https://www.sprint.com/ - Software Link:...

Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure

Exploit Title: clear voyager hotspot IMW-C910W - file disclosure - Date: 2016/jul/15 - Exploit Author: Damaster - Vendor Homepage: https://www.sprint.com/ - Software Link: https://web.archive.org/web/20150526042938/http://www.clearwire.com/downloads/IMW-C910WV2234R4383A.bin - Version: R4383 - -...

Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure

Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure - Exploit Title: clear voyager hotspot IMW-C910W - file disclosure - Date: 2016/jul/15 - Exploit Author: Damaster - Vendor Homepage: https://www.sprint.com/ - Software Link:...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

Uber: Change any Uber user's password through /rt/users/passwordless-signup - Account Takeover (critical)

Through the endpoint at /rt/users/passwordless-signup it is possible to change the password of any Uber user, given knowledge of their phone number or by just enumerating phone numbers until one is found that is registered with Uber - not too hard given the number of Uber users. I've tested this...

CVE-2016-2311

Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior with firmware before SP473, AlertWerks ServSensor Junior with PoE with firmware before SP473, and AlertWerks ServSensor Contact with firmware before SP473 allow remote authenticated users to discover...

phpcms v9 逻辑缺陷导致可重置任意用户密码

No description provided by source...

phpyun 两处任意用户密码漏洞

No description provided by source...

finecms <= 2.3.0 arbitrary User Password Change-bug-warning-the black bar safety net

Impact version 1 4 4 1 8 Number Update 2. 3. 0 and previous versions. The latest version does not have this problem. Clouds explosion over a the use of violence to crack the code a way to reset the password, here the manner discussed with respect to the brute-force to lower costs. Looking directl...

Security Advisory - Plaintext User Password Vulnerability in VCN500 Logs

Huawei VCN500 Video Cloud Node logs user passwords in plaintext for specific operations on the certain interface, leading to user password leakage. Vulnerability ID：HWPSIRT-2015-09032 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2015-8335. Huawei has...

Well-known Forum app for vBulletin 5 exposure remote command execution vulnerability that may have leaked millions of user data-bug warning-the black bar safety net

! On Monday, it is reported that vBulletin developer site suffered a hacker attack and compromised nearly 4 8 million the vBulletin user's sensitive information. In the event a hacker after the attack, the vBulletin official emergency mandatory require the user to reset the password, they warn th...

CSRF vulnerabilities in Callisto 821+R3 ADSL Router

Hello 3APA3A! After all my advisories about vulnerabilities in Callisto 821+ http://seclists.org/fulldisclosure/2011/Aug/1 and recent advisory about Callisto 821+R3, here is new one. Because vendor ignored in 2011 all my letters and subsequent my public disclosure of vulnerabilities and new devic...

phpyun 任意用户密码修改两处 (秒破/demo测试)

简要描述： 好久没看过php了。。。。 如题咯。 详细说明： 来看到找回密码的地方。 app/controller/forgetpwd/index.class.php function sendaction $username=yuniconv"utf-8","gbk",$POST'username'; if!$this-CheckRegUser$username&&!$this-CheckRegEmail$username $res'msg'=yuniconv"gbk","utf-8","用户名不符合规范！"; $res'type'='8'; echo...

Callisto 821+R3 Cross Site Request Forgery Vulnerability

Callisto 821+R3 suffers from multiple cross site request forgery vulnerabilities. After all my advisories about vulnerabilities in Callisto 821+ http://seclists.org/fulldisclosure/2011/Aug/1 and recent advisory about Callisto 821+R3, here is new one. Because vendor ignored in 2011 all my letters...