PT-2024-4213 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS and FortiProxy versions are affected, but specific versions are not provided in the highest-priority sources. Description: A cryptographic algorithm issue exists that could cause denial of service, device reboot, or an attack...

CVE-2024-34082 Grav Arbitrary File Read to Account Takeover

Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - /grav/user/accounts/.yaml. This file stores hashed user password, 2FA secret, and the password res...

Grav 安全漏洞

Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product presentations. A security vulnerability exists in Grav versions prior to 1.7.46. An attacker exploited the vulnerability to compromise any registered account and read a...

PT-2024-40029 · Catalyst · Sentry

Name of the Vulnerable Software and Affected Versions: OpenCFP affected versions not specified Description: The issue concerns the third-party authentication framework Sentry, developed by Cartalyst, which is used in OpenCFP. It stems from how Sentry handles password reset checks, specifically wh...

PT-2024-3988 · Unknown · Lunary-Ai/Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary version 1.2.4 Description: A vulnerability exists in the password recovery mechanism of lunary-ai/lunary, where the reset password token is not invalidated after use. This allows an attacker who compromises the recovery token...

CVE-2024-2463

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1...

CVE-2024-2463

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1...

CVE-2024-2463

CVE-2024-2463 describes a weak password recovery mechanism in the CDeX application that allows retrieval of a password reset token, affecting versions up to 5.7.1. The Red Hat and NVD entries confirm the issue and its impact on password reset flows. The generic details do not specify vulnerable c...

PT-2024-20485 · Cdex · Cdex

Name of the Vulnerable Software and Affected Versions: CDeX application versions through 5.7.1 Description: The issue is related to a weak password recovery mechanism in the CDeX application, which allows the retrieval of a password reset token. Recommendations: For versions through 5.7.1, update...

CDeX 安全漏洞

CDeX is a free software package from CDeX Inc. for extracting digital audio from audio CDs and converting audio formats for Microsoft Windows. A security vulnerability exists in CDeX 5.7.1 and earlier versions that stems from the presence of a weak password recovery mechanism that allows retrieva...

CVE-2024-24903

Dell Secure Connect Gateway SCG Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the application with privileges of the...

GHSA-75X2-6H4M-H6MX FullStackHero's WebAPI Boilerplate host header injection vulnerability

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

FullStackHero's WebAPI Boilerplate host header injection vulnerability

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

Design/Logic Flaw

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

PT-2024-21391 · Fullstackhero · Webapi Boilerplate

Name of the Vulnerable Software and Affected Versions: FullStackHero's WebAPI Boilerplate versions 1.0.0 through 1.0.1 Description: A host header injection issue in the forgot password function allows attackers to leak the password reset token via a crafted request. Recommendations: For versions...

CVE-2024-26470

CVE-2024-26470 describes a host header injection in the forgot password feature of FullStackHero.WebAPI.Boilerplate (versions v1.0.0 and v1.0.1). The underlying issue is insufficient validation of the Host header, allowing an attacker to craft a request that leaks the password reset token. Impact...

CVE-2024-26470

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v1.0.1 allows attackers to leak the password reset token via a crafted request...

CVE-2024-24570 Statamic account takeover via XSS and password reset link

Statamic is a Laravel and Git powered CMS. HTML files crafted to look like jpg files are able to be uploaded, allowing for XSS. This affects the front-end forms with asset fields without any mime type validation, asset fields in the control panel, and asset browser in the control panel...

PT-2024-20460 · Statamic · Statamic

Name of the Vulnerable Software and Affected Versions: Statamic versions prior to 3.4.17 Statamic versions prior to 4.46.0 Description: The issue allows HTML files crafted to look like jpg files to be uploaded, enabling cross-site scripting XSS attacks. This affects front-end forms with asset...