CVE-2026-85734

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

CVE-2021-46366

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users'...

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

Summary 9router enforces a progressive login lockout 5 failed attempts → temporary 30s+ lock keyed on the client IP. The client IP used for this limiter is taken from the X-9r-Real-Ip request header, which is intended to be set only by the bundled custom-server.js layer from the unspoofable TCP...

EUVD-2026-84548

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

CVE-2026-85734 LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightragserver.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attacker can submit password guesses at full...

CVE-2026-85734

The LightRAG retrieval-augmented generation tool is vulnerable to brute-force attacks due to a lack of rate limiting on the POST /login endpoint in lightrag/api/lightrag_server.py. Specifically, the application does not implement account lockouts, delays, or attempt counters for failed authentica...

EUVD-2026-84542

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-supplied X-9r-Real-Ip value as the bucket key in getClientIp, checkLock, and recordFail in src/lib/auth/loginLimiter.js fo...

CVE-2026-56682 9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-supplied X-9r-Real-Ip value as the bucket key in getClientIp, checkLock, and recordFail in src/lib/auth/loginLimiter.js fo...

CVE-2026-56682

9Router versions prior to 0.5.6 are vulnerable to a login brute-force lockout bypass. The application's rate-limiting mechanism, specifically in src/lib/auth/loginLimiter.js, uses the client-supplied X-9r-Real-Ip header as the bucket key for tracking failed login attempts. When deployed without t...

CVE-2026-56682 9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-supplied X-9r-Real-Ip value as the bucket key in getClientIp, checkLock, and recordFail in src/lib/auth/loginLimiter.js fo...

CVE-2026-43914-PoC

CVE-2026-43914 — Omisión de la protección de fuerza bruta del Email-2FA de Vaultwarden Prueba de concepto para CVE-2026-43914 : cuando Email 2FA está habilitado, la protección de fuerza bruta del inicio de sesión de Vaultwarden puede omitirse por completo a través del endpoint no autenticado POST...

CVE-2026-95697

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2024-24919

CVE-2024-24919 Este proyecto tiene como objetivo crear una automatización para estudiar mejor la CVE-2024-24919. api.py : Recolecta los posibles IPs vulnerables. CVE-2024-24919.py : Realiza fuerza bruta con el archivo de IPs y el archivo de directorios. worldListLFI.txt : Lista de directorios de...

@sync-in/server vulnerable to TOTP Brute-Force via `POST /api/app/sync/register`

Affected component: Sync-in Server v2.3.0, POST /api/app/sync/register. Required attacker capability: Valid login and password for a TOTP-enabled account with desktop sync permission. Summary POST /api/app/sync/register accepts credentials and a TOTP code to register a desktop sync client. In the...

EUVD-2026-84494

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2023-45182

CVE-2023-45182 IBM i Access Client Solutions 1.1.9.4 - Cifrado débil de contraseñas Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client Solutions, para almacenar las...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py 该脚本首先会识别版本，判断是否为易损版本，后尝试确认log文件是否存在，若存在，则会尝试发包后再次请求log文件尝试查找hash泄露，若LiteSpeed启用debug，则有可能泄露正确Hash root@kitploit: usage: CVE-2024-28000Scan.py -h -f F -t T -p PROXY CVE-2024-28000 Scan optional arguments: -h, --help show this help...

BRIntelcollector

BRIntelcollector Visión General El BRIntelcollector es una herramienta de Cyber Threat Intelligence CTI enfocada en indicadores de amenazas nacionales de Brasil. La herramienta permite buscar y consolidar información sobre amenazas cibernéticas a través de múltiples fuentes de inteligencia,...

CVE-2018-15473_burte

CVE-2018-15473burte openssh7.7 用户名枚举...

CVE-2025-51868

CVE-2025-51868 Descripción de la vulnerabilidad Dippy es un popular sitio web para chatear con millones de personajes de IA proactivos. Dippy permite a los usuarios chatear con personajes basados en LLM, que es vulnerable a una Referencia Insegura Directa a Objetos IDOR en su componente de chat. ...