Lucene search
K

8 matches found

CVE
CVE
added 2026/03/05 9:18 p.m.9 views

CVE-2026-21622

The CVE-2026-21622 vulnerability affects hexpm (Elixir.Hexpm.Accounts.PasswordReset) where password reset tokens do not expire. The issue arises in the PasswordReset flow (lib/hexpm/accounts/password_reset.ex; Elixir.Hexpm.Accounts.PasswordReset:can_reset?/3), allowing tokens to remain valid inde...

9.8CVSS6AI score0.0039EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/03/05 9:18 p.m.4 views

EUVD-2026-9876

Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Accounts.PasswordReset' module allows Account Takeover. Password reset tokens generated via the "Reset your password" flow do not expire. When a user requests a password reset, Hex sends an email containing a reset...

9.5CVSS6AI score0.0039EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/05 9:18 p.m.23 views

CVE-2026-21622 Password Reset Tokens Do Not Expire

Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Accounts.PasswordReset' module allows Account Takeover. Password reset tokens generated via the "Reset your password" flow do not expire. When a user requests a password reset, Hex sends an email containing a reset...

9.5CVSS0.0039EPSS
Exploits0References4
HackRead
HackRead
added 2023/09/07 12:14 p.m.24 views

ProtonMail Code Vulnerabilities Leaked Emails

By Waqas Key Findings ProtonMail, a popular Swiss-based email service that markets itself as a secure and private alternative to… This is a post from HackRead.com Read the original post: ProtonMail Code Vulnerabilities Leaked Emails...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2016/10/17 9:55 p.m.15 views

WikiLeaks Confirms Ecuador Cut Julian Assange's Internet Access After Clinton Leak

Early Monday, Whistleblowing site WikiLeaks tweeted that the internet connection of its co-founder, Julian Assange, was intentionally cut down, for which it blamed an unidentified "state party." But most surprisingly, it was Ecuador who was behind the act. WikiLeaks has confirmed that its founder...

6.6AI score
Exploits0
The Hacker News
The Hacker News
added 2012/03/14 10:43 p.m.7 views

FBI actually leak Stratfor e-mails just to bust Julian Assange?

FBI actually leak Stratfor e-mails just to bust Julian Assange? Internal emails disclosed by Anonymous and WikiLeaks suggest that Stratfor, a private intelligence firm working with the U.S. Justice Department. But The FBI turned a computer hacker to build its case against a group of people it...

6.7AI score
Exploits0
The Hacker News
The Hacker News
added 2011/02/17 5:53 a.m.8 views

Hacked security firm backs out of security conference !

It has really got to hurt when you run a computer security company and an outlaw hacker group manages to steal and post on the Internet embarrassing emails connecting you to much-publicized plans for crushing the enemies of large corporations through unsavory means like disinformation and...

7.1AI score
Exploits0
The Hacker News
The Hacker News
added 2011/02/07 9:33 a.m.11 views

Anonymous Hackers Pay Back FBI Snitch with 50,000 Leaked Emails !

Right now you can download a 4.7 gigabyte book abounding of about 50,000 emails baseborn from a computer aegis able called Aaron Barr. That's what happens aback you cantankerous the hacking aggregate Anonymous. Hackers from Anonymous, best-known for attacks on Scientology and Wikileaks detractors...

6.6AI score
Exploits0
Rows per page
Query Builder