CVE-2010-3305

Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...

WordPress Frontend Login and Registration Blocks 1.0.7 Privilege Escalation

WordPress Frontend Login and Registration Blocks plugin versions 1.0.7 and below are vulnerable to privilege escalation via account takeover. An unauthenticated attacker can change the administrator's email, trigger the Forgot Password process, and reset the admin password, gaining full control...

CVE-2025-44023

An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...

D-Link DNS-320 安全漏洞

D-Link DNS-320 is a NAS Network Attached Storage device from China AUO D-Link. A security vulnerability exists in D-Link DNS-320 version v1.00 and DNS-320LW version v1.01.0914.20212, which stems from a flaw in the accountmgr.cgi - cgichgadminpw component that could lead to the execution of...

CVE-2025-4297

A vulnerability was found in PHPGurukul Men Salon Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/change-password.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed...

Rancher 安全漏洞

Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations that deploy containers in production environments. A security vulnerability exists in Rancher versions prior to 2.8.0 to 2.8.14, 2.9.0 to 2.9.8, and 2.10.0 to 2.10.4, which stems...

Vulnerability fixed in FortiSwitch

Fortinet has fixed a vulnerability in the FortiSwitch GUI. The vulnerability with reference CVE-2024-48887, is located in the FortiSwitch GUI, which allows a remote, unauthenticated malicious person to change admin passwords via specially crafted requests. This security issue can lead to...

CVE-2025-3325

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...

CVE-2024-48887

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request...

PT-2025-15476 · Fortinet · Fortiswitch

Name of the Vulnerable Software and Affected Versions: FortiSwitch versions 6.4.0 through 7.6.0 Description: A critical vulnerability in the FortiSwitch GUI allows remote, unauthenticated attackers to change admin passwords via a specially crafted request. This issue may give attackers control ov...

CVE-2025-3325

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...

CVE-2025-3325

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...

CVE-2025-3325 iteaj iboot 物联网网关 Admin Password pwd access control

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...

CVE-2025-3325 iteaj iboot 物联网网关 Admin Password pwd access control

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attac...

CVE-2025-3325

CVE-2025-3325 affects iteaj iboot 物联网网关 1.1.3, specifically the Admin Password Handler in the file near /core/admin/pwd. The root cause is manipulation of the ID argument that leads to improper access controls. This enables a remote attack, and the exploit has been publicly disclosed per the sour...

PT-2025-15126 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A problematic issue was found in the Admin Password Handler component, affecting an unknown part of the file /core/admin/pwd. The manipulation of the ID argument leads to improper access controls,...

CVE-2025-22940

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password...

CVE-2025-22940

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password...

CVE-2025-22940

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password...

CVE-2025-22940

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin password...