8 matches found
CVE-2026-53981
Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email address without re-authentication such as password or MFA verification. Attackers can redirect...
EUVD-2018-18648
Malware in sbrugna...
CVE-2021-38154: Incorrect Permission Assignment for Critical Resource
Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...
CVE-2018-19924: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address...
CVE-2018-6879: Improper Input Validation
PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
CVE-2018-6903: Improper Input Validation
PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code...
PT-2018-17811
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1 Description The issue concerns the validation of an e-mail address, which is enforced on the client side. This allows remote attackers to modify a registered e-mail address by...
