PT-2026-41301

Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure Permissions, which allows arbitrary user password reset...

ELADMIN 安全漏洞

ELADMIN is a backend management system developed by elunez’s individual developer. Versions of ELADMIN 2.7 and earlier contained security vulnerabilities. These vulnerabilities stemmed from a vulnerability allowing arbitrary user password resets, which could lead to password resets at any user...

EUVD-2017-17076

Malware in sbrugna...

CVE-2024-45982

CVE-2024-45982 affects scheduleR v0.0.18 and is described as a host header injection vulnerability. The underlying issue allows an attacker to obtain a password reset token by user interaction with a crafted password reset link, enabling arbitrary password resets and account compromise. The Red H...

CVE-2024-26520

The CVE-2024-26520 entry concerns Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1. Multiple connected sources confirm a vulnerability where an attacker can bypass authentication and perform arbitrary password resets. This affects the Rest...

CVE-2024-26520

An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets...

Debian: Security Advisory (DLA-933-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Brush Bracelet App Has Design Logic Flaws

The Brush Bracelet app is a smart wearable device app. There is a design logic vulnerability in Brush Bracelet app. An attacker can exploit the vulnerability to perform arbitrary user registration and arbitrary password reset operations...

Debian DLA-933-1 : roundcube security update

Roundcube Webmail allows arbitrary password resets by authenticated users. The issue is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin. For Debian 7 'Wheezy', these problems have been fixed in version 0.7.2-9+deb7u7. We recommend that you...

The vulnerability of the AD Self Password Reset password reset tool allows a hacker to reset arbitrary passwords.

The vulnerability of the PasswordReset.Controllers.ResetController.ChangePasswordIndex method PasswordReset.dll, a password reset tool for AD Self Password Reset, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to reset arbitra...