CVE-2023-46393

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet...

Beijing Yilong Information Technology Co., Ltd Yilong Travel Network has a Logic Flaw Vulnerability

Yilong.com Information Technology Beijing Co., Ltd. is an enterprise that operates, researches, develops and produces computer hardware and software. Ltd. eLong Travel Network has a logic flaw vulnerability that can be exploited by attackers to cause arbitrary user registrations and reset arbitra...

Wheeling Self-Driving Android App is vulnerable to arbitrary account password resets

Wheel Self-Driving APP is a self-driving comprehensive service center software. The Rolling Self-Driving Android APP is vulnerable to arbitrary account password reset vulnerability. It allows an attacker to reset any registered account password by means of CAPTCHA blasting...