AVideo's Meet plugin: `uploadRecordedVideo.json.php` derives `users_id` from the uploaded filename and calls passwordless `User->login()`, allowing any caller with the Meet shared secret to obtain a session as arbitrary users including admin

Summary Type: Authorization-bypass via user-controlled identifier. The Meet plugin's recorded-video upload endpoint plugin/Meet/uploadRecordedVideo.json.php authenticates the caller using a single shared Authorization: Bearer against $objM-secret. Once that check passes, the endpoint reads the...

CVE-2017-18264: Undefined Security Weakness

An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg'Servers'$i'AllowNoPassword' = false are bypassed under certain PHP versions e.g., version 5. This can allow the login of users who have no...

PT-2016-3033

Name of the Vulnerable Software and Affected Versions ОВЕН ПЛК110 affected versions not specified Description The issue is related to the reset of the set password level when power is turned off. An attacker, acting locally, can exploit this to log in without a password due to the password level...

PT-2018-6789

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions 4.0 through 4.0.10.19 phpMyAdmin version 4.4.x phpMyAdmin version 4.6.x phpMyAdmin version 4.7.0 prereleases Description: An issue allows the bypassing of restrictions caused by $cfg'Servers'$i'AllowNoPassword' = false und...

3com-nmc-tch.txt

Date: Mon, 21 Dec 1998 11:23:57 -0800 From: Entropy Reply-To: Bugtraq List To: [email protected] Subject: Fwd: Re: 3com The software that 3com has developed for running the NMC network management card for the Total Control Hubs is a bit shady. After uploading the software as one must do YOU wi...