Search Vulnerabilities

blueprintUE: Password Reset Tokens Have No Expiry Window

OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise

Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability

Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms

Payload has Unvalidated Input in Password Recovery Endpoints

Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect

OPEXUS eComplaint and eCase insecure password reset

StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation

IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response

Statamic is vulnerable to account takeover via password reset link injection

funadmin Member.php repass password recovery

Intelbras VIP 3260 Z IA OutsideCmd password recovery

vichan-devel vichan Password Change pages.php unverified password change

Known affected by Account Takeover via Password Reset Token Leakage

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

Information Disclosure in Birebirsoft's Sufirmam