42 matches found
CVE-2018-25354: Cross-Site Request Forgery (CSRF)
Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to chan...
CVE-2018-25336 jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details...
CVE-2018-25336: Cross-Site Request Forgery (CSRF)
jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account details...
CVE-2026-28766
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication...
CVE-2026-28766
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication...
PT-2026-30231
Name of the Vulnerable Software and Affected Versions Gardyn affected versions not specified Description A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. Recommendations At the moment, there is no information about a newer...
CVE-1999-0198
finger .@host on some systems may print information on some user accounts...
EUVD-2021-24033
Malware in sbrugna...
EUVD-2022-31222
Malicious code in bioql PyPI...
EUVD-2023-34641
Malicious code in bioql PyPI...
CVE-2025-10538 Authentication Bypass in LG Innotek Camera
An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...
PT-2025-40062
Name of the Vulnerable Software and Affected Versions LG Innotek camera models LND7210 and LNV7210R Description An authentication bypass flaw exists in LG Innotek camera models LND7210 and LNV7210R. This allows a malicious actor to gain access to camera information, including user account...
The vulnerability of the virtual machine of the Dell PowerFlex Manager allows a hacker to disclose user account information that is protected.
The vulnerability of the Dell PowerFlex Manager software virtual machine relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose user account information...
CVE-2024-23186
E-Mail containing malicious display-name information could trigger client-side script execution when using specific mobile devices. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
CVE-2025-46745 Improper Privilege Management
An authenticated user without user-management permissions could view other users account information...
CVE-2023-5359 W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext
The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to impersonate W3 Total Cache and gain...
Information disclosure
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...