Search Vulnerabilities

Improper Authentication in Vimesoft's Enterprise Video Platform

Capgo - Authentication Bypass in Password Change via Missing Current Password Validation

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26

OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements

Flowise - Unverified Password Change via Account Settings

Flowise - Unverified Email Change via Account Profile Endpoint

KMW CCTV Security Cameras Unverified Password Change

Unverified password change in Devolutions Server allows an attacker to change a user's password without providing the previous one via a crafted pa...

Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass.

OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

blueprintUE: Authenticated Password Change Does Not Verify Current Password

Navicat for Oracle 12.1.15 Password Field Denial of Service

SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change

EventSentry < 6.0.1.20 Web Reports Unverified Password Change

vichan-devel vichan Password Change pages.php unverified password change

Tenda W30E V2 Allows Password Changes Without Verifying Current Password

Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service

MOVEit Transfer REST API does not require current password in order to initiate the password change process

IBM Aspera Orchestrator Unverified Password Change

Ibexa User Bundle is missing password change validation