CVE-2016-0783

creationtimestamp| type| source ---|---|--- 2023-11-28 12:42:33+00:00| seen| https://t.me/arpsyndicate/639 2026-08-22 14:00:21+00:00| seen| https://t.me/informationsec/872 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/872 2026-08-24 00:00:08+00:00| published-proof-of-concept|...

CVE-2016-0783

The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time...

CVE-2016-0783

CVE-2016-0783 affects Apache OpenMeetings prior to 3.1.1. The vulnerability resides in the sendHashByUser function, which generates password reset tokens deterministically using a username and the current system time, enabling remote attackers to reset arbitrary user passwords under that knowledg...