8121 matches found
PageKit 1.0.10 - Password Reset
PageKit 1.0.10 - Password Reset Exploit Title: Remote PageKit Password Reset Vulnerability Date:21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7 Contact: http://twitter.com/securelayer7 Website: https://securelayer7.net Category: webapps 1...
PageKit 1.0.10 - Password Reset
Exploit Title: Remote PageKit Password Reset Vulnerability Date:21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7 Contact: http://twitter.com/securelayer7 Website: https://securelayer7.net Category: webapps 1. Description Anyremote user can reset the...
Information Disclosure In Password Reset Form
weblate is vulnerable to information disclosure in its password reset form. When entering an arbitrary email address in the password reset form, it will report back "User with this email address was not found", allowing to figure out which user accounts exist on the weblate instance...
DOBBY Pocket Drone App for Android Arbitrary Password Reset Vulnerability
Zero Intelligent Control Beijing Intelligent Technology Co., Ltd. is committed to becoming the world's top supplier of intelligent aircraft products and intelligent drone total solutions.DOBBY Pocket Drone is one of the company's products. DOBBY Pocket Drone APP Android version has an arbitrary...
PHOENIX CONTACT mGuard
CVSS V3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Software update changes password to default AFFECTED PRODUCTS PHOENIX CONTACT reports that the vulnerability affects the following mGuard products: Only devices that hav...
CVE-2017-5473
Removed by vendor...
Network transmission PayPal is the exposure of"acquaintances can tamper with the password"deadly vulnerability-vulnerability warning-the black bar safety net
! This morning, the security client to the user feedback, the account is a friends login, and show the Bank card and the free password to pay functions can be normal use, very with devices, IP, environmental, geographical location, the truth in the end how? We know almost found on the relevant...
Ubiquiti Robotics Alpha2 Android app has arbitrary password reset vulnerability
Ubitus is a company that integrates artificial intelligence and humanoid robotics research and development, platform software development and utilization, and product sales. An arbitrary password reset vulnerability exists in the Ubitus Robotics Alpha2 Android app. The vulnerability allows an...
Design flaws in the Android version of the Far Eastern Express app client
Yuancheng Express app is a life service application, a mobile logistics platform. There is a design vulnerability in the Far Cheng Express app client for Android. Due to the digest digest algorithm can be cracked, allowing an attacker to exploit the vulnerability to reset the password of any user...
Design/Logic Flaw
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
UBUNTU-CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header...
CVE-2016-7903
Dotclear before 2.10.3 is vulnerable to password reset address forgery because the HTTP Host header is not included in the web server routing process. This allows remote attackers to modify the password reset link. A patch is available in Dotclear 2.10.3; upgrading is recommended. (Affected: Dotc...
U.S. Dept Of Defense: Password reset vulnerability on a DoD website
A password reset vulnerability was found on a DoD website, which could have allowed a malicious user to identify legitimate users and arbitrarily reset their passwords. @sp1d3rs was able to demonstrate this vulnerability by accessing a DoD webpage. Thanks @sp1d3rs!...
U.S. Dept Of Defense: Misconfigured password reset vulnerability on a DoD website
A Department of Defense website was mis-configured such that the password reset function could be bypassed to change a user's password. @mthirup was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks @mthirup!...
BMC Remedy AR System Server Password Reset Vulnerability
BMC Remedy is BMC Software's mobile digital enterprise management platform for IT departments, of which Remedy AR System Server is the server side. A security vulnerability exists in the Remedy AR System Server in BMC Remedy. An attacker can exploit this vulnerability to reset arbitrary passwords...
