CVE-2017-12851

CVE-2017-12851 affects Kanboard prior to 1.0.46. An authenticated standard user could reset the administrator password by altering form data in the request, exposing a password‑reset vulnerability in the admin account. Remediation guidance found in public references suggests upgrading to a fixed ...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for hardware platform in category web applications /...

Override Access Vulnerability in S-CMS V3.0 dbm.asp Page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 dbm.asp page has an override access vulnerability that can be exploited by an attacker to bypass Cookies authentication, execute arbitrary sql statements, and obtain the administrator's passwo...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

RealTime RWR-3G-100 Router - Cross-Site Request Forgery Change Admin Password !-- CHANGE...

RealTime RWR-3G-100 Router Cross Site Request Forgery

...

Unspecified Vulnerability in Green Packet DX-350

The Green Packet DX-350 is a network access point device from Green Packet USA. A security vulnerability exists in the Green Packet DX-350 using firmware version 2.8.9.5-g1.4.8-atheeb, which stems from the administrator account having a default password. No details of the vulnerability are provid...

Friends in War Make or Break Cross-Site Request Forgery Vulnerability

Friends in War Make or Break is a foreign web application. Friends in War Make or Break cross-site request forgery vulnerability. The vulnerability can be exploited to change the administrator password...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11680

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

CVE-2017-11680: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...

PT-2017-12172

Name of the Vulnerable Software and Affected Versions Hashtopussy version 0.4.0 Description A Cross-Site Request Forgery CSRF issue exists, allowing an unauthorized change of the admin password through the users.php endpoint. Recommendations For Hashtopussy version 0.4.0, consider disabling acces...

Friends in War Make or Break 1.7 - CSRF (Change Admin Password) Vulnerability

Exploit for php platform in category web applications Friends in War Make or Break 1.7 - Unauthenticated admin password change Url: http://software.friendsinwar.com/ http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Author: shinnai mail: shinnaiatautisticidotorg site:...

Friends in War Make or Break 1.7 - Cross-Site Request Forgery (Change Admin Password)

Friends in War Make or Break 1.7 - Cross-Site Request Forgery Change Admin Password Friends in War Make or Break 1.7 - Unauthenticated admin password change Url: http://software.friendsinwar.com/ http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Author: shinnai mail:...

Friends in War Make or Break 1.7 - Cross-Site Request Forgery (Change Admin Password)

Friends in War Make or Break 1.7 - Unauthenticated admin password change Url: http://software.friendsinwar.com/ http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.altervista.org/...

CVE-2017-11519

passwdrecovery.lua on the TP-Link Archer C9UNV2160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9UNV2170511...

CVE-2017-11519

passwdrecovery.lua on the TP-Link Archer C9UNV2160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9UNV2170511...

CVE-2017-11519

TP-Link Archer C9(UN)_V2_160517 is affected by CVE-2017-11519 due to a predictable RNG seed in passwd_recovery.lua, enabling an attacker to reset the admin password over the network. The issue is fixed in firmware C9(UN)_V2_170511. If exploited, impact is administrator password reset; CVSS metric...