CVE-2024-2862

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-2862

LG LED Assistant exposes an unauthenticated password-reset vulnerability (CVE-2024-2862). The Nuclei template details an endpoint: /api/changePw that accepts requests from localhost and can be triggered by spoofing X-Forwarded-For: 127.0.0.1 to obtain a success response, enabling password resets ...

CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-30187

Anope before 2.0.15 does not prevent resetting the password of a suspended account...

CVE-2024-30187

Anope before 2.0.15 does not prevent resetting the password of a suspended account...

CVE-2024-30187

Anope before 2.0.15 does not prevent resetting the password of a suspended account...

CVE-2024-30187

Summary: CVE-2024-30187 affects Anope prior to 2.0.15, where credentials for suspended accounts are not handled securely, enabling password resets to compromise login for suspended users. The issue is documented across multiple feeds (NVD, OSV, Ubuntu USN). What’s affected: Anope 2.0.14 and earli...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an interrupt generated during a bus reset...

CVE-2021-47153

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt...

LG LED Assistant 授权问题漏洞

LG LED Assistant is a software from Luckin LG Korea. It is used to set up LED lights. A security vulnerability exists in LG LED Assistant. A remote attacker could exploit the vulnerability to reset an anonymous user's password...

PT-2024-23238 · Anope +3 · Anope +3

Name of the Vulnerable Software and Affected Versions: Anope versions prior to 2.0.15 Description: The issue allows resetting the password of a suspended account. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

CVE-2024-30187

Anope before 2.0.15 does not prevent resetting the password of a suspended account...

PT-2024-11214 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an Oopsable condition in the nfs pageio add request function. To resolve this, nfs pageio error cleanup has been updated to reset the mirror array contents,...

Anope 安全漏洞

Anope is a set of open source IRC services open sourced by Anope IRC Services. A security vulnerability exists in Anope versions prior to 2.0.15, which stems from a vulnerability that does not prevent an attacker from resetting the password of a suspended account...

CVE-2024-30187

Anope before 2.0.15 does not prevent resetting the password of a suspended account...

PT-2024-22495

Name of the Vulnerable Software and Affected Versions LG LED Assistant affected versions not specified Description This issue allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant. Recommendations At the moment, there is no...

CVE-2024-2463

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1...

CVE-2024-2463

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1...

CVE-2024-2463

CVE-2024-2463 describes a weak password recovery mechanism in the CDeX application that allows retrieval of a password reset token, affecting versions up to 5.7.1. The Red Hat and NVD entries confirm the issue and its impact on password reset flows. The generic details do not specify vulnerable c...