438 matches found
CVE-2025-13313
The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6. This is due to missing authorization and authentication checks on the ntzcrmchangepassword AJAX action. This makes it possible for unauthenticated attackers...
EUVD-2025-38730
EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password...
GO-2025-4059 Mattermost Server: Insufficient Password-Reset Link Invalidation in github.com/mattermost/mattermost-server
Mattermost Server: Insufficient Password-Reset Link Invalidation in github.com/mattermost/mattermost-server...
EUVD-2020-26268
Malware in sbrugna...
EUVD-2016-8813
Malware in sbrugna...
EUVD-2020-5023
Malware in sbrugna...
EUVD-2020-14114
Malware in sbrugna...
EUVD-2018-6867
Malware in sbrugna...
EUVD-2018-6887
Malware in sbrugna...
EUVD-2017-4386
Malware in sbrugna...
EUVD-2018-1943
Malware in sbrugna...
EUVD-2018-13262
Malware in sbrugna...
EUVD-2020-6562
Malware in sbrugna...
EUVD-2010-1929
Malware in sbrugna...
EUVD-2017-12018
Malware in sbrugna...
EUVD-2018-8338
Malware in sbrugna...
EUVD-2006-5459
Malware in sbrugna...
EUVD-2014-4730
Malware in sbrugna...