CVE-2023-26481 Insufficient user check in FlowTokens by Email stage

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...

CVE-2023-24080

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 on iOS allows attackers to compromise user accounts via a bruteforce attack...

CVE-2022-47697

COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...

Design/Logic Flaw

In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

PT-2023-15170 · Sengled · Sengled Smart Bulb

Name of the Vulnerable Software and Affected Versions: Sengled Smart bulb version 0x0000024 Description: A vulnerability in the Sengled Smart bulb allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame. Recommendations: For Sengled Smart bulb versi...

CVE-2022-23502 TYPO3 contains Insufficient Session Expiration after Password Reset

TYPO3 is an open source PHP based web content management system. In versions prior to 10.4.33, 11.5.20, and 12.1.1, When users reset their password using the corresponding password recovery functionality, existing sessions for that particular user account were not revoked. This applied to both...

Western Digital My Cloud 授权问题漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in versions of Western Digital My Cloud prior to 5.25.124 that stems from incorrect authentication and allows insecure direct access to drive information when the device is reset...

CVE-2022-43326

An Insecure Direct Object Reference IDOR vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4. allows attackers to arbitrarily change user and Administrator account passwords...

Default credentials

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password...

CVE-2022-44004

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password...

CVE-2022-39307 Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password

Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the /api/user/password/sent-reset-email URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks...

openCRX 安全漏洞

openCRX is an open source Crm software. A security vulnerability previously existed in openCRX version v5.2.2, which stemmed from vulnerability to password enumeration due to a different error message received during password reset, which could allow an attacker to determine whether a username,...

Improper Access Control

typo3/cms is vulnerable to improper access control. The expiration time of a password reset link has never been evaluated, which allows an authenticated attacker to use the password reset link to perform a password reset even if the default expiry time of two hours has been exceeded...

TYPO3 授权问题漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. TYPO3 suffers from an authorization issue vulnerability that stems from never evaluating the expiration time of the password reset link for TYPO3 back-end users...

The vulnerability of the password reset function of the Snipe-IT asset management system allows a hacker to obtain a password reset token and access the account.

The vulnerability of the password reset function in the Snipe-IT asset management system is related to incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow a malicious actor to obtain a password reset token and access to the account by sending a...

Axigen Mobile WebMail 跨站脚本漏洞

Axigen Mobile WebMail is a mobile webmail service from Axigen Romania. A security vulnerability exists in Axigen Mobile WebMail versions prior to 10.2.3.12 and prior to 10.3.3.47, which stems from a cross-site scripting issue in the reset password section of indexmobilechangepass.hsp...

Cloud Foundry UAA password reset vulnerability

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release uaa-release 13.x versions prior to v13.14...

CVE-2022-23064 Snipe-IT - Host Header Injection

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password...

Ping Identity PingFederate授权问题漏洞

Ping Identity PingFederate is a flagship software-based federation server in the United States. for identity management. Ping Identity PingFederate has a security vulnerability that can be exploited by an existing user to reset the password of another existing user when the password reset mechani...

Vulnerability fixed in Zoho ManageEngine ADSelfService Plus

Zoho has fixed a vulnerability in ManageEngine ADSelfService Plus. An authenticated malicious person could potentially potentially exploit it to execute arbitrary code. The vulnerability is located in the password reset functionality. Systems are vulnerable only when custom scripts are enabled fo...