CVE-2026-85291

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::changepassword method accepts a userid from the URL and updates that account's password without an object-level authorization check. An authenticated secondary...

CVE-2026-85291 InvoicePlane IDOR: Horizontal Privilege Escalation via Password Change Without Authorization Check

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::changepassword method accepts a userid from the URL and updates that account's password without an object-level authorization check. An authenticated secondary...

CVE-2026-85291

The self-hosted open source application InvoicePlane is vulnerable to a Horizontal Privilege Escalation (IDOR) in versions prior to 1.7.2 . The root cause is an object-level authorization check failure within the Users::change_password() method, which accepts a user_id from the URL. This allows a...

CVE-2026-85291 InvoicePlane IDOR: Horizontal Privilege Escalation via Password Change Without Authorization Check

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::changepassword method accepts a userid from the URL and updates that account's password without an object-level authorization check. An authenticated secondary...

CVE-2026-85291 InvoicePlane IDOR: Horizontal Privilege Escalation via Password Change Without Authorization Check

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Users::changepassword method accepts a userid from the URL and updates that account's password without an object-level authorization check. An authenticated secondary...

CVE-2026-94034

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94034 SourceCodester Drug Recommendation System Password Change change_password cross site scripting

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94034 SourceCodester Drug Recommendation System Password Change change_password cross site scripting

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-94034

A cross-site scripting (XSS) vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the Password Change component (file /drug_recommender/Admin/change_password). Manipulating the txtoldpassword/txtnewpassword parameters leads to XSS, with the attack vector being r...

EUVD-2026-83750

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-18589

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...

CVE-2026-18589: Stack-based Buffer Overflow

A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function changepassword of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be use...

CVE-2026-22604: Exposure of Sensitive Information to an Unauthorized Actor

OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.6.2, when sending a POST request to the /account/changepassword endpoint with an arbitrary User ID as the passwordchangeuserid parameter, the resulting error page would show the...

Sophos Web Appliance change_password Admin Password Privilege Escalation (CVE-2014-2849)

A privilege escalation vulnerability has been reported in Sophos Web Appliance. The vulnerability is due to errors in a changepassword request when handling user input. A remote authenticated attacker could exploit this vulnerability by placing specially crafted data in a changepassword request...

CVE-2014-2849: Undefined Security Weakness

The Change Password dialog box changepassword in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request...

Sophos Web Appliance Privilege Escalation and Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos Web Appliance. Authentication is required to exploit this vulnerability. The specific flaws exist within the changepassword and netinterface functions of the web appliance. The first flaw wi...

BLUE COM Router 5360/52018 - Password Reset Exploit

BlueCom router model 5360/52018 remote password reset exploit. Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch id...

CVE-2008-6553

microcms-admin-home.php in Implied by Design Micro CMS Micro-CMS 3.5 aka 0.3.5 does not require authentication as an administrator, which allows remote attackers to 1 create administrative accounts via an addadmin action, 2 remove administrative accounts via a deleteadmin action, and 3 modify...