CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2022-47891 Admin password reset in NetMan 204

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function...

CVE-2022-47891 Admin password reset in NetMan 204

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function...

PT-2023-5727 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetDeviceSettings function when handling the AdminPassword parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-41027

Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint...

Juplink RX4-1500 Security Vulnerability

The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5, which originates from an information disclosure vulnerability in the /webs/userpasswd.htm endpoint. An attacker can exploit the...

PT-2023-27747 · Juplink · Juplink Rx4-1500

Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 Description: The issue allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint "/webs/userpasswd.htm"...

Contest Management System Log Information Disclosure Vulnerability

Contest Management System is an open source contest management system from CMS development group. A security vulnerability exists in Contest Management System v1.4.rc1, which stems from a plaintext password in AddAdmin.py that allows an attacker to obtain sensitive information through audit logs...

Information Disclosure

gitlab is vulnerable to Information Disclosure. This allows an admin to leak passwords through a repository mirror configuration...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

Default credentials

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

PT-2023-26390 · Rigol · Rigol Mso5000

Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to change the admin password via a zero-length password to the "webcontrol changepwd.cgi" application. This means the entered password on...

RIGOL MSO5000 安全漏洞

The RIGOL MSO5000 is an oscilloscope from China's Puyuan Jingdian RIGOL company. A security vulnerability exists in the RIGOL MSO5000 version 00.01.03.00.03, which originates from changing the administrator password via a zero-length pass0 to the Webcontrol Changepwd.cgi application, i.e., the...

CVE-2023-38379

The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin password via a zero-length pass0 to the webcontrol changepwd.cgi application, i.e., the entered password only needs to match the first zero characters of the saved...

YznCMS 跨站请求伪造漏洞

YznCMS is a backend development framework. A cross-site request forgery vulnerability exists in YznCMS v1.1.0, which stems from insufficiently verifying that a request comes from a trusted user in /public/admin/profile/update.html. An attacker could exploit this vulnerability by constructing a PO...

Allhandsmarketing LMS 2.0 Cross Site Request Forgery

==================================================================================================================================== | Title : Allhandsmarketing LMS v2.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...

CVE-2022-3372

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel,...

CVE-2022-3372

CVE-2022-3372 describes a CSRF vulnerability in Riello UPS NetMan-204 (version 02.05). The issue arises from lack of proper validation on CSRF tokens, enabling an attacker to change administrator passwords and potentially modify other critical admin parameters via forged requests, potentially gra...