Search Vulnerabilities

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response

Statamic is vulnerable to account takeover via password reset link injection

funadmin Member.php repass password recovery

Intelbras VIP 3260 Z IA OutsideCmd password recovery

vichan-devel vichan Password Change pages.php unverified password change

Known affected by Account Takeover via Password Reset Token Leakage

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

Information Disclosure in Birebirsoft's Sufirmam

Improper Access Control in Birebirsoft's Sufirmam

Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery

Beehive Forum - Account Takeover

Uasoft badaso Token BadasoAuthController.php forgetPassword password recovery

Easy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect

LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

Shenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recovery

Emby Server allows attackers to gain administrative server access without preconditions

MAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password