Code injection

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors...

Code injection

Huawei Unified Maintenance Audit UMA before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors...

CVE-2016-3640

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispatcher trace files, aka SAP Security Note 2148905...

WordPress < 4.5.3 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.5.3. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Customizer component that allows an unauthenticated, remote attacker to...

CVE-2016-1543

The RPC API in the RSCD agent in BMC BladeLogic Server Automation BSA 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure...

CVE-2016-1543

CVE-2016-1543 affects BMC BladeLogic Server Automation RSCD agent (Linux/UNIX) across 8.2.x–8.7.x. The RPC API allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure. Public exploitation exists (NSH r...

CVE-2016-0783

The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time...

CVE-2016-0783

The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Windows operating system in the XML Core Services component, related to the ability to access data during document type declarations, allows attackers to gain access to sensitive user data such as names, passwords, or files on the hard drive...

CmsEasy企业网站管理系统数据库直连（涉及大量用户密码\敏感信息泄漏）

简要描述： CmsEasy企业网站管理系统数据库直连（涉及大量用户密码，敏感信息泄漏） 详细说明： pay.cmseasy.cn/0.rar 源码暴露 果断 漏洞证明： pay.cmseasy.cn/0.rar...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

[SECURITY] Fedora 21 Update: php-horde-passwd-5.0.4-1.fc21

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

[SECURITY] Fedora 23 Update: php-horde-passwd-5.0.4-1.fc23

An application to change any user passwords stored in various backends like SQL, LDAP, Kolab, passwd files etc...

The vulnerability of the Mac OS X operating system allows a hacker to arbitrarily change user passwords.

The vulnerability of the Apple ID OD plugin for the Mac OS X operating system is related to the management of access parameters. Exploiting this vulnerability allows a malicious actor to arbitrarily change user passwords using the created application...

CVE-2015-5496

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors...

CVE-2015-5496

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors...

CVE-2015-3799

The Apple ID OD plug-in in Apple OS X before 10.10.5 allows attackers to change arbitrary user passwords via a crafted app...

HP Operations Orchestration 10.x Remote Information Disclosure

The remote host has a version of HP Operations Orchestration installed that is 10.x prior to 10.21.0001. It is, therefore, affected by an information disclosure vulnerability. A remote, authenticated attacker can exploit this, via PowerShell PS script operations, to obtain user passwords and othe...

Is this vulnerability? The researchers accused the world's largest Dating site Match login pages not using HTTPS-bug warning-the black bar safety net

! American researcher Scott Bryner pointed out, the world's largest Dating website, Match. com login page don't for any reason by HTTPS jump for HTTP, which means that the transmission of user passwords not protected by encryption, and this problem has been there for weeks and no one attention...

CVE-2015-3322

Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store 1 user and 2 administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors...