kernel: crypto: pcrypt - Fix hungtask for PADATA_RESET

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATARESET We found a hungtask bug in testaeadveccfg as follows: INFO: task cryptomgrtest:391009 blocked for more than 120 seconds. "echo 0 /proc/sys/kernel/hungtasktimeoutsecs" disables this...

CVE-2021-27704

Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...

CVE-2021-27704

Appspace 6.2.4 is affected by an Incorrect Access Control in the Web Portal password reset page. Root cause stated as an access control error affecting confidentiality (high impact) with CVSS 3.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents. Remedi...

CVE-2021-27704

Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...

PT-2024-10910 · Appspace · Appspace

Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue is related to Incorrect Access Control via the Appspace Web Portal password reset page. This allows potential exploitation. The estimated number of potentially affected devices worldwide is not...

CVE-2024-48322

CVE-2024-48322 affects Run.codes, specifically versions 1.5.2 and older. The vulnerability is a reset password race condition in the file UsersController.php , with confirmed impact described as a race condition in reset password workflows. Public sources across NVD, Red Hat, OSV, CNNVD and CVE l...

CVE-2024-48322

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability...

PT-2024-33080 · Run.Codes · Run.Codes

Name of the Vulnerable Software and Affected Versions: Run.codes versions 1.5.2 and older Description: The issue is related to a reset password race condition in the UsersController.php file. This condition can be problematic and poses a risk. There is no information provided about the estimated...

run.codes 安全漏洞

run.codes is a server software from run.codes open source. A security vulnerability exists in run.codes version 1.5.2 and earlier, which stems from a Reset Password Contest Condition vulnerability in the file UsersController.php...

CVE-2024-48322

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability...

PT-2024-9817 · Crushftp · Crushftp

Name of the Vulnerable Software and Affected Versions: CrushFTP versions 10 through 10.8.2 CrushFTP versions 11 through 11.2.2 Description: The issue is related to a flaw in the password reset mechanism of CrushFTP, allowing a remote attacker to gain access to a user's account and take full contr...

Remitly: [CRITICAL] 0-Click Account Takeover via Password Reset [AUTH-3243] /orchestrator/v1/password_reset/start

The vulnerability discovered allows an attacker to reset the password of a victim's account without requiring any user interaction or special privileges. By intercepting the password reset request and modifying it with the victim's session data, the attacker can successfully take over the account...

CVE-2024-51714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...

CVE-2024-51714 WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...

CVE-2024-51714 WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techdabang User Password Reset user-password-reset allows Reflected XSS.This issue affects User Password Reset: from n/a through = 1.0...

CVE-2024-51714

CVE-2024-51714 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin/theme component “User Password Reset.” The issue arises from improper neutralization of user-supplied input during web page generation, allowing an attacker to craft a URL that, when visited by a victi...

UBUNTU-CVE-2024-50256

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfrejectipv6: fix potential crash in nfsendreset6 I got a syzbot report without a repro 1 crashing in nfsendreset6 I think the issue is that dev-hardheaderlen is zero, and we attempt later to push an Ethernet header. U...

CVE-2024-50226

CVE-2024-50226 : Linux kernel vulnerability in the CXL port code. A use-after-free during teardown of a region with multiple endpoint decoders (example: decoders 7.0 and 14.0 sharing a switch-decoder 3.0) could allow out-of-order shutdown and leave stale references. The patch ensures: (1) proper ...

CVE-2024-50226 cxl/port: Fix use-after-free, permit out-of-order decoder shutdown

In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In support of investigating an initialization failure report 1, cxltest was updated to register mock memory-devices after the mock root-port/bus device had been...

CVE-2024-10508

The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the password reset token prior to updati...