Unverified Password Change

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Unverified Password Change through the backend user management interface. An attacker can modify user accounts without needing to verify the current password by...

CVE-2024-29401

xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything...