Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/10 2:16 p.m.•13 views

CVE-2026-108163

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

6.9CVSS0.00217EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/10 1:55 p.m.•29 views

CVE-2026-108163

Pingvin Share X versions prior to 1.22.0 are vulnerable to ineffective rate limiting due to a logic error where throttler TTL values specified in seconds are incorrectly interpreted as milliseconds. This allows unauthenticated attackers to send effectively unthrottled requests to the /api/auth/si...

6.9CVSS5.8AI score0.00217EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/10 1:55 p.m.•28 views

CVE-2026-108163 Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

6.9CVSS5.8AI score0.00183EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/10 1:55 p.m.•47 views

CVE-2026-108163 Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

6.9CVSS0.00217EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/10 1:55 p.m.•22 views

EUVD-2026-96318

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

6.9CVSS5.8AI score0.00217EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/10 12:00 a.m.•11 views

CVE-2026-108163: Improper Restriction of Excessive Authentication Attempts

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

6.9CVSS5.8AI score0.00217EPSS
SaveExploits0References2
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•3 views

Tabby Panel - Detect

Tabby panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Tabby panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tabby Panel - Detect', 'description': 'Tabby panel was discovered.'...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder