CVE-2023-5959

A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txt_newpwd leads to weak password recovery. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244992. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-640

• https://github.com/Changboqian/cve/blob/main/reset_password_improperly.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.244992Third Party Advisory
• https://vuldb.com/?id.244992Third Party Advisory
• https://vuldb.com/?submit.232562
• https://github.com/Changboqian/cve/blob/main/reset_password_improperly.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.244992Third Party Advisory
• https://vuldb.com/?id.244992Third Party Advisory
• https://vuldb.com/?submit.232562

Published

Nov 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5953The Welcart e-Commerce WordPress plugin before 2.9.5 does no…8.8
• CVE-2023-5954HashiCorp Vault and Vault Enterprise inbound client requests…7.5
• CVE-2023-5955The Contact Form Email WordPress plugin before 1.3.44 does n…4.8
• CVE-2023-5956The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sani…4.8
• CVE-2023-5957The Ni Purchase Order(PO) For WooCommerce WordPress plugin t…7.2
• CVE-2023-5958The POST SMTP Mailer WordPress plugin before 2.7.1 does not …6.1
• CVE-2023-5960An improper privilege management vulnerability in the hotspo…5.5
• CVE-2023-5961A Cross-Site Request Forgery (CSRF) vulnerability has been i…8.8
• CVE-2023-5962A weak cryptographic algorithm vulnerability has been identi…6.5
• CVE-2023-5963An issue has been discovered in GitLab EE with Advanced Sear…4.3
• CVE-2023-5964The 1E-Exchange-DisplayMessageinstruction that is part of th…7.2
• CVE-2023-5965An authenticated privileged attacker could upload a speciall…7.2