📦 Yetishare

This vulnerability in YetiShare allows attackers to reset user passwords using leaked password reset hashes that never expire. It affects YetiShare installations from version 3.5.2 through 4.5.4. Atta...

This vulnerability in YetiShare allows attackers to guess password reset tokens by brute-forcing predictable hashes based on microtime. Attackers can reset any user's password and gain unauthorized ac...