Search Vulnerabilities

Beehive Forum - Account Takeover

Uasoft badaso Token BadasoAuthController.php forgetPassword password recovery

Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect

LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

Shenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recovery

Emby Server allows attackers to gain administrative server access without preconditions

MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password

Host header poisoning allows account takeover via password reset email

SourceCodester Inventory Management System resetPassword.php password recovery

ClipBucket v5 is vulnerable to password reset link manipulation

Piwigo is vulnerable to one-click account takeover by modifying the password-reset link

2FA Expiry Bypass in Optimus Software's Brokerage Automation

Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism

ZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection

AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

Weak password recovery vulnerability

Wavlink WL-WN578W2 sysinit.html password recovery

Daikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten Password

WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability

jshERP updatePwd password recovery