PT-2018-13653

Name of the Vulnerable Software and Affected Versions Kirby version 2.5.12 Description The issue concerns a Host header injection via the "forget password" feature in the panel/login of Kirby. Recommendations For version 2.5.12, consider disabling the "forget password" feature as a temporary...

CVE-2018-16627: Improper Neutralization of Special Elements in Output Used by a Downstream Component

panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature...

esf.org.hk XSS vulnerability

Open Bug Bounty ID: OBB-629530 Description| Value ---|--- Affected Website:| esf.org.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ntsescholars.com XSS vulnerability

Open Bug Bounty ID: OBB-629523 Description| Value ---|--- Affected Website:| ntsescholars.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Dating Bar App Has Logic Flaws

Dating App is a dating platform. There is a logic vulnerability in Dating Bar APP. An attacker can register any user and reset any password by grabbing packets and blasting through the forget password function...

PHP Scripts Mall Resume Clone Script SQL Injection Vulnerability (CNVD-2018-00492)

Resume Clone Script is a resume clone script from PHP Scripts Mall. PHP Scripts Mall Resume Clone Script suffers from a SQL injection vulnerability. A remote attacker can exploit this vulnerability by injecting the 'username' parameter into the forget.php file to obtain user or sensitive data abo...

MicroTalk App Has SMS Bombing Vulnerability

MicroTalk App is a calling software. MicroTalk APP has SMS bombing vulnerability. The attacker sends unlimited CAPTCHA to the cell phone by catching packets through the forget password function, consumes server resources, and carries out SMS bombing...

Vauxhall General Management Android App has SMS Bombing Vulnerability

Wojia General Manager Android APP is a home control software. There is an SMS bombing vulnerability in Wojia Total Management Android APP. Attackers can bombard the client with SMS messages by utilizing the forget password function...

True Luck Driver Mobile App Has Logic Design Flaws

True Luck Driver Mobile App is a mobile application that helps truck drivers find work. There is a logical design vulnerability in the True Luck Driver mobile app. An attacker can log into any user account by using the forget password function to capture packet blasting to obtain the verification...

CVE-2017-9554

An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors...

CVE-2017-9554

An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors...

PT-2017-19014 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.3-15152 Description: The issue allows remote attackers to enumerate valid usernames via unspecified vectors due to an information exposure vulnerability in forget passwd.cgi...

CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection...

CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection...

Wordpress forget-about-shortcode-buttons plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. get-about-shortcode-buttons is one of the plug-ins used to add CSS buttons in the post editor screen. A cross-site...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

Cross site scripting

Reflected XSS in wordpress plugin forget-about-shortcode-buttons v1.1.1...

CVE-2016-1000133

The Nuclei template confirms CVE-2016-1000133: a reflected XSS in WordPress plugin forget-about-shortcode-buttons v1.1.1, enabling arbitrary script execution in a user’s browser and potential cookie theft. Affected component: WordPress plugin forget-about-shortcode-buttons (version 1.1.1). Root c...

PT-2016-4525

Name of the Vulnerable Software and Affected Versions wordpress plugin forget-about-shortcode-buttons version 1.1.1 Description The issue is related to a Reflected XSS in the wordpress plugin forget-about-shortcode-buttons. Recommendations For wordpress plugin forget-about-shortcode-buttons versi...