CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...

CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...

CVE-2023-5840

CVE-2023-5840 affects LinkStack prior to v4.2.9, describing a weak password recovery mechanism. The vulnerability enables password-reset-token leakage via Host header manipulation (password reset link hijacking) as demonstrated in public PoC contexts. The issue is confirmed across multiple source...

CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9...

PT-2023-32372 · Linkstack · Linkstack

Name of the Vulnerable Software and Affected Versions: linkstack versions prior to 4.2.9 Description: The issue concerns a weak password recovery mechanism for forgotten passwords. Recommendations: For versions prior to 4.2.9, update to version 4.2.9 or later to resolve the issue...

LinkStack Authorization Issues Vulnerability

LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. An authorization issue vulnerability exists in versions prior to LinkStack v4.2.9 that stems from the absence of a weak password recovery mechanism for forgotten...

The vulnerability of the microprogramming software of the Connectize G6 AC2100 router allows a hacker to gain administrator privileges.

The vulnerability of the Connectize G6 AC2100 router’s microprogramming software is related to weak password requirements. Exploiting this vulnerability can allow a remote attacker to gain administrator privileges...

HCL Technologies Compass Weak Password Vulnerability

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. Manages the full range of testing activities and integration with developer tools. HCL Technologies Compass suffers from a weak password vulnerability that stems from susceptibility to insecure password...

CVE-2023-37503 A weak password requirements vulnerability affects HCL Compass

HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts...

CVE-2023-37503 A weak password requirements vulnerability affects HCL Compass

HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts...

HCL Technologies Compass 安全漏洞

HCL Technologies Compass is a low-code change management software from HCL Technologies, USA. Manages the full range of testing activities and integration with developer tools. HCL Technologies Compass suffers from a weak password vulnerability that stems from susceptibility to insecure password...

PT-2023-6357 · Connectize · Connectize Ac21000 G6

Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: An issue was discovered that allows attackers to gain escalated privileges on the device via poor credential management. This is related to weak password requirements. Exploitation of...

The vulnerability of the Apache InLong data integration platform, related to weak password requirements, allows attackers to gain access to user accounts.

The vulnerability of the Apache InLong data integration platform is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to gain access to a user account remotely...

CVE-2023-26239

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...

CVE-2023-26239

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a non-privileged user...

PT-2023-20556 · Watchguard · Watchguard Epdr

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR version 8.0.21.0002 Description: An issue was discovered due to a weak implementation of a password check, making it possible to obtain credentials to access the management console as a non-privileged user. Recommendations: Fo...

WatchGuard EPDR Security Vulnerability

WatchGuard EPDR is an application from WatchGuard USA, Inc. prevents, detects and responds to any type of known and unknown malware as well as fileless and malware-free attacks. A security vulnerability exists in WatchGuard EPDR version 8.0.21.0002, which stems from a weak implementation of...

CVE-2023-5296

A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password recovery. The attack may be launched...

Design/Logic Flaw

A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password recovery. The attack may be launched...

CVE-2023-5296

The CVE-2023-5296 entry applies to Xinhu RockOA (versions 1.1–2.3.2 and 15.X3amdi) and concerns the Password Handler component. Affected functionality is within api.php?m=reimplat&a=index, where manipulation enables weak password recovery. The issue is exploitable remotely and can impact confiden...