CVE-2020-8228

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...

CVE-2020-8228

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...

CVE-2020-8228

CVE-2020-8228 describes a missing rate limit on the signup page in the Nextcloud Preferred Providers app (version 1.7.0), allowing an attacker to repeatedly set the password. The OpenSUSE security advisory (NC-SA-2020-033) and related OSS notes confirm this CVE and indicate it was addressed in th...

CVE-2020-8228

A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times...

Fedora 28 : 1:epiphany (2018-a5e45fc9f7)

Fix CVE-2018-11396/CVE-2018-12016 795740 - Allow Ctrl+T in app mode again due to unintended consequences 796204 - Don't remember passwords when the setting is disabled 796219 - Fix password manager crash on chase.com GitLab 11 Note that Tenable Network Security has extracted the preceding...

Online Voting System Authentication Bypass Vulnerability

Online Voting System is an online voting system. A security vulnerability exists in the profile section of Online Voting System version 1.0. The vulnerability can be exploited by an attacker to set passwords for other accounts...

CVE-2018-6180

CVE-2018-6180 describes an authentication bypass in the Online Voting System 1.0 where an unauthenticated user can set an arbitrary password for other accounts via the profile section. The root cause is a flaw that allows password updates based on an incremental identifier without validating the ...

Password Security — Who's to Blame for Weak Passwords? Users, Really?

The majority of Internet users are vulnerable to cyber threats because of their own weaknesses in setting up a strong password. But, are end-users completely responsible for choosing weak passwords? Give a thought. Recently we wrote an article revealing the list of Worst Passwords of 2015 that...

Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability

From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...

SuperH (sh4) Add root user with password

No description provided by source. / Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor -...

2Wire Routers - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

Design/Logic Flaw

A certain ActiveX control in iisext.dll in Microsoft Internet Information Services IIS allows remote attackers to set a password via a string argument to the SetPassword method. NOTE: this issue could not be reproduced by a reliable third party. In addition, the original researcher is unreliable...

CVE-2008-4301

CVE-2008-4301 concerns a vulnerability in the ActiveX control in iisext.dll used by Microsoft Internet Information Services (IIS). The affected component is an ActiveX control; the reported issue allows remote attackers to set a password via a string argument to the SetPassword method. The core p...

avast! Antivirus Server Edition Password Setting Weakness

The remote host is running avast! Antivirus Server Edition. The installed version of this software reportedly does not ask for a password even if one is set. A local attacker may be able to leverage this issue to bypass authentication and manipulate settings of the affected application. C Tenable...

Lexmark / Dell Printer Unauthenticated Access

The remote printer has no password set. This allows anyone to change its IP or potentially to intercept print jobs sent to it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12236; scriptversion "$Revision: 1.14 $"; scriptcvsdate"$Date: 2013/01/25 01:19:09 $";...