Word Diary App Has Multiple Vulnerabilities

Word Diary App is a word memorization app with situational semantics and English-English explanations. Word Diary APP has arbitrary user registration, arbitrary password reset and stored cross-site scripting attack vulnerabilities, which can be exploited by attackers to register any user,...

Privilege escalation

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release uaa-release 13.x versions prior to v13.15,...

CVE-2017-4992

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release uaa-release 13.x versions prior to v13.15,...

CVE-2017-4992

CVE-2017-4992 affects Cloud Foundry components including cf-release prior to v261 and UAA releases prior to specified versions (2.x before 2.7.4.17, 3.6.x before 3.6.11, 3.9.x before 3.9.13, and other versions before v4.2.0; UAA bosh releases prior to 13.x before 13.15, 24.x before 24.10, 30.x be...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

Bargo Travel Android App Has Arbitrary User Password Reset Vulnerability

Ba Ge Travel is a car time-sharing and leasing platform founded by Beijing Ba Ge Auto Leasing Co., Ltd. with the help of Internet of Things IoT technology and advanced operation mode, realizing the unattended, rent-and-return intelligent car mode, and is committed to providing users with 24-hour...

Arbitrary Password Reset Vulnerability in 'Admin_Edit.aspx' File of Micro Xia Online Learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. An arbitrary password reset vulnerability exists in the 'AdminEdit.aspx' file of the Weixia Online Learning Platform. It allows an attacker to reset the administrator password by entering a new password in...

Beijing Cloud Fox Times Android App Has Arbitrary Password Reset Vulnerability

Beijing Cloud Fox Times Technology Co., Ltd. is a cutting-edge domestic special intelligent equipment research and development company, is the industry terminal and service solution experts. Beijing Cloud Fox Times Android App exists arbitrary password reset vulnerability, through the other party...

Debian DLA-933-1 : roundcube security update

Roundcube Webmail allows arbitrary password resets by authenticated users. The issue is caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin. For Debian 7 'Wheezy', these problems have been fixed in version 0.7.2-9+deb7u7. We recommend that you...

Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change

!/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO, 1.7.1, 1.7.0, 1.6.1 Summary: Serviio is a free media server. It allows you to stream you...

Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change

Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO, 1.7.1,...

RoundCube Webmail Reset Arbitrary Password Vulnerability

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. A reset arbitrary password vulnerability exists in Roundcube Webmail. An attacker can exploit this vulnerability to reset arbitrary passwords...

Design/Logic Flaw

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php...

Wise Dogs Android App Has Arbitrary Password Reset Vulnerability

Smart Home Dog Android App is an application about wireless access control intercom system,wireless smart home system. Smart Home Dog Android App has an arbitrary password reset vulnerability. Allow attackers only need to know each other's cell phone number to change their passwords, leaking...

PHPCMS 'phpcms\modules\member\index.php ' Arbitrary Password Reset Vulnerability

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. PHPCMS 'phpcms\modules\member\index.php ' has an arbitrary password rese...

Cisco Webex Meetings Server Arbitrary Password Change Vulnerability

A vulnerability in Cisco Webex Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

HiMall Multi-User Mall System Exists Arbitrary Password Reset Vulnerability

Hishop multi-user mall system is a multi-store support multi-vendor stationed, mainly for high-end customers, for traditional enterprises and large and medium-sized online business to improve the operational capacity of merchants as the core, similar to Jingdong, Tmall e-commerce platform. Hishop...

ipmi-cipher-zero NSE Script

IPMI 2.0 Cipher Zero Authentication Bypass Scanner. This module identifies IPMI 2.0 compatible systems that are vulnerable to an authentication bypass vulnerability through the use of cipher zero. Script Arguments vulns.short, vulns.showall See the documentation for the vulns library. Example Usa...

Arbitrary Password Changing Vulnerability in Hi-Read Media's Digital Newspaper System

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. The product /www/index.php?mod=admin&con=adminuser&act=editpost there is an arbitrary password change vulnerability, an attacker can exploit the vulnerability by submitting a POST request to change the...

zzcms user/check.php has arbitrary user password change vulnerability

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version of any user password change vulnerability, the vulnerability trigger point in /user/check.php, the attacker can take advantage of the vulnerability to...