CVE-2017-8827

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

CVE-2017-8827

CVE-2017-8827 affects GeniXCMS 1.0.2: the forgotpassword.php endpoint lacks rate limiting, enabling a remote attacker to cause login denial of service or potentially perform arbitrary user password reset attacks via repeated requests. The available connected documents corroborate the same descrip...

CVE-2017-8827: Improper Authentication

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service login inability or possibly conduct Arbitrary User Password Reset attacks via a series of requests...

PT-2017-18560

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is related to the forgotpassword.php file, which lacks a rate limit. This might allow remote attackers to cause a denial of service, resulting in login inability, or possibly conduct Arbitrary User...

CVE-2017-5594

An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7PGKT01...

CVE-2016-9450

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context...

PT-2016-7761

Name of the Vulnerable Software and Affected Versions Drupal 8.x versions prior to 8.2.3 Description The issue concerns the user password reset form, which allows remote attackers to conduct cache poisoning attacks due to the failure to specify a correct cache context. Recommendations For version...

CVE-2016-9450: Insufficient Verification of Data Authenticity

The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

phpcms v9 逻辑缺陷导致可重置任意用户密码

No description provided by source...

Well-known Forum app for vBulletin 5 exposure remote command execution vulnerability that may have leaked millions of user data-bug warning-the black bar safety net

! On Monday, it is reported that vBulletin developer site suffered a hacker attack and compromised nearly 4 8 million the vBulletin user's sensitive information. In the event a hacker after the attack, the vBulletin official emergency mandatory require the user to reset the password, they warn th...

VBZoom 1.0 - Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious...

FineCMS任意用户密码重置

简要描述： FineCMS任意用户密码重置 详细说明： finecms最新版2.3.0，官方2014年4月18号更新。 finecms在密码找回功能处存在设计缺陷，导致可重置任意用户密码。 来看看密码找回的代码： / 找回密码 / public function find $step = max1, int$this-input-get'step'; $error = ''; if ISPOST switch $step case 1: if $uid = getcookie'find' $this-membermsg lang'm-093',...

Discuz! Remote Reset User Password Exploit

Exploit for unknown platform in category web applications ========================================== Discuz! Remote Reset User Password Exploit ========================================== !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Discu...

Simple Machines Forum (SMF) < 1.1.6 Password Reset Vulnerability

Simple Machines Forum SMF is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net

Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...

Mysteriously replaced XP user password-vulnerability warning-the black bar safety net

Windows XP startup scriptstartup scriptsis a computer in the login screen to appear before running the batch file, which functions similar to the Windows 9×and DOS automatically executed batch file, the autoexec . bat. Using this feature, you can write a batch file to re-set the user password, an...