12604 matches found
Sql injection
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
UBUNTU-CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
CVE-2022-32741
The CVE-2022-32741 entry concerns OTRS (versions 7.x up to 7.0.35 and 8.x up to 8.0.23) where the Request New Password feature can leak valid usernames via response-time differences, enabling user enumeration. The root cause is timing-based information disclosure in the password-reset flow. The p...
CVE-2022-32741 Information disclosure in Request New Password feature
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
CVE-2022-32741
Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...
OTRS 安全漏洞
OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS versions 8.0.x through 8.0.23 and OTRS versions 7.0.x through 7.0.35, which stems from a difference in application response times. An attacker could exploit the vulnerabilit...
Design/Logic Flaw
There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...
CVE-2022-30898
A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...
Cross site request forgery (csrf)
A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...
CVE-2022-30898
A Cross-site request forgery CSRF vulnerability in Cscms music portal system v4.2 allows remote attackers to change the administrator's username and password...
CVE-2022-23168
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--...
GLPI 跨站脚本漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
TOTOLINK EX1200T Trust Management Issue Vulnerability
TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.TOTOLINK EX1200T is vulnerable to a trust management issue, which stems from the presence of a default username and password in the firmware, and can be exploited by an attacker to launch telnet without...
CVE-2021-3754
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password. Mitigation The workaround is to enable "Email as username" flag ...
CVE-2022-31492
Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...