Lucene search
+L

303 matches found

Vulnrichment
Vulnrichment
added 2024/11/04 12:0 a.m.10 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

7.4AI score0.00552EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.14 views

PT-2024-34598 · Unknown · Agile-Board

Name of the Vulnerable Software and Affected Versions: Agile-Board version 1.0 Description: A Host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This is achieved through exploiting the Host header injection...

8.8CVSS7.3AI score0.00552EPSS
SaveExploits1References6
CVE
CVE
added 2024/11/04 12:0 a.m.63 views

CVE-2024-51329

CVE-2024-51329 – Normal details available Agile-Board 1.0 is affected by a Host header injection vulnerability that can lead to leakage of a password reset token when a user interacts with a crafted password reset link. The core issue is a Host header injection flaw, enabling an attacker to manip...

8.8CVSS7.4AI score0.00552EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/11/04 12:0 a.m.32 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

0.00552EPSS
SaveExploits1References2
NVD
NVD
added 2024/09/26 5:15 p.m.14 views

CVE-2024-45981

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS0.00347EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 5:15 p.m.16 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

8.8CVSS0.00347EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 5:15 p.m.10 views

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

8.8CVSS0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.4 views

PT-2024-31867 · Unknown · Bookreviewlibrary

Name of the Vulnerable Software and Affected Versions: BookReviewLibrary version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This is achieved through manipulating the host header, which...

8.8CVSS7.1AI score0.00347EPSS
SaveExploits0References7
CVE
CVE
added 2024/09/26 12:0 a.m.46 views

CVE-2024-45981

BookReviewLibrary 1.0 is affected by a host header injection vulnerability that lets an attacker obtain a password reset token by interacting with a crafted password reset link. Root cause appears to be host header manipulation affecting the reset flow. The vulnerability is described across multi...

8.8CVSS7.4AI score0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.5 views

PT-2024-31866 · Meanstore · Meanstore

Name of the Vulnerable Software and Affected Versions: MEANStore version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link, enabling them to reset other users' passwords and compromise their...

8.8CVSS7.3AI score0.00385EPSS
SaveExploits0References7
CVE
CVE
added 2024/09/26 12:0 a.m.44 views

CVE-2024-45979

Affected software: Lines Police CAD 1.0. The issue is a host header injection that lets an attacker cause a crafted password reset link to reveal a password reset token, enabling arbitrary password resets and account compromise through user interaction. This vulnerability is documented in multipl...

8.8CVSS7.2AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.15 views

CVE-2024-45981

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.21 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.18 views

CVE-2024-45980

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.5 views

Lines Police CAD 安全漏洞

Lines Police CAD is an easy to set up and use police server from the individual developers at Merrill Lines. A security vulnerability exists in Lines Police CAD version 1.0 that originates from user interaction with a carefully constructed password reset link, allowing an attacker to obtain a...

8.8CVSS6.8AI score0.00385EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.4 views

scheduleR 安全漏洞

scheduleR is a framework available to bart6114 individual developers for deploying R tasks, reports and applications. A security vulnerability exists in scheduleR version 0.0.18, which stems from the presence of a host header injection vulnerability that allows an attacker to obtain a password...

8.8CVSS7.2AI score0.00347EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.7 views

PT-2024-31868 · Scheduler · Scheduler

Name of the Vulnerable Software and Affected Versions: scheduleR version 0.0.18 Description: A host header injection vulnerability allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This enables attackers to arbitrarily reset other users'...

8.8CVSS7.5AI score0.00347EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.18 views

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.8 views

PT-2024-31865 · Unknown · Lines Police Cad

Name of the Vulnerable Software and Affected Versions: Lines Police CAD version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link, enabling them to arbitrarily reset other users' passwords and...

8.8CVSS7.6AI score0.00385EPSS
SaveExploits0References7
CVE
CVE
added 2024/09/26 12:0 a.m.48 views

CVE-2024-45982

CVE-2024-45982 affects scheduleR v0.0.18 and is described as a host header injection vulnerability. The underlying issue allows an attacker to obtain a password reset token by user interaction with a crafted password reset link, enabling arbitrary password resets and account compromise. The Red H...

8.8CVSS7.2AI score0.00347EPSS
SaveExploits0References1
Rows per page
Query Builder