Skip to content
OpenAdvisories

Archive

7 February 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.1

    macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

    macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a victim’s telephone number. The password …