Zhengnuo (Shanghai) Energy Conservation Technology Co., Ltd Opler APP has multiple vulnerabilities

Opler APP is a mobile software with a complete backend management system. Zhengnuo Shanghai Energy Conservation Technology Co., Ltd Opler APP exists arbitrary password reset, arbitrary user registration, override and stored cross-site scripting vulnerabilities. Attackers can use the vulnerability...

Brush Bracelet App Has Design Logic Flaws

The Brush Bracelet app is a smart wearable device app. There is a design logic vulnerability in Brush Bracelet app. An attacker can exploit the vulnerability to perform arbitrary user registration and arbitrary password reset operations...

Hunan Ding Ding Easily Builds App with Multiple Vulnerabilities

Hunan Ding Ding Easily Build APP is an order-taking tool for engineers. Hunan Ding Ding Easy Build APP has arbitrary user registration, payment flaws and arbitrary password reset vulnerability. Attackers can use the vulnerability to register any cell phone number, modify any user order informatio...

Mobile movie app has logic design flaws

Mobile Movie App is a video product specially launched for the majority of movie lovers. There is a logical design vulnerability in the mobile movie app. Attackers can use the vulnerability to perform arbitrary user registration, arbitrary password reset operations...

Word Diary App Has Multiple Vulnerabilities

Word Diary App is a word memorization app with situational semantics and English-English explanations. Word Diary APP has arbitrary user registration, arbitrary password reset and stored cross-site scripting attack vulnerabilities, which can be exploited by attackers to register any user,...

elog incorrect authentication vulnerability

elog is a logging library written in the Erlang language that supports log hierarchies. A security vulnerability exists in elog version 3.1.1. A remote attacker can exploit the vulnerability to publish data on the logbook under an arbitrary user name...

Shining Flash cms Frontend Arbitrary User Login Vulnerability

Flash Flash cms is a flash website system developed by Zibo Flash Network Technology Co. Flash cms has a front-end arbitrary user login vulnerability. The vulnerability stems from the program's failure to filter user-submitted data, an attacker can use the vulnerability to bypass authentication t...

CVE-2017-8382

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8382

admidio 3.2.8 has CSRF in admprogram/modules/members/membersfunction.php with an impact of deleting arbitrary user accounts...

CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

Default credentials

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

CVE-2017-8827

CVE-2017-8827 affects GeniXCMS 1.0.2: the forgotpassword.php endpoint lacks rate limiting, enabling a remote attacker to cause login denial of service or potentially perform arbitrary user password reset attacks via repeated requests. The available connected documents corroborate the same descrip...

CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

Yaxim and Bruno User Simulation Vulnerabilities

yaxim and Bruno are both products of Georg Lukas. yaxim Yet Another XMPP Instant Messenger is an XMPP client with a clean user interface and open source GPLv2. Bruno is the best Jabber / XMPP Instant Messaging IM application. Bruno is the best Jabber / XMPP Instant Messaging IM application. A use...

Palo Alto Networks Terminal Services Agent Arbitrary User Forgery Vulnerability

Palo Alto Networks Terminal Services Agent is a terminal services agent program. A security vulnerability exists in Palo Alto Networks Terminal Services Agent that could be exploited by remote attackers to spoof arbitrary users...

CVE-2016-9479

The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

Cisco Unified Intelligence Center is the management center for the unified communications system of the American company Cisco Cisco. A cross-site request forgery vulnerability exists in Cisco Unified Intelligence Center, which could be exploited by remote attackers to hijack the authentication o...

CVE-2016-3917

The fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does not track the user account during the authentication process, which allows physically proximate attackers to authenticate as an arbitrary user by leveraging lockscreen access, aka internal bug 30744668...

CVE-2016-7107

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors...