CVE-2025-56218

CVE-2025-56218 Неограниченная загрузка файлов Описание Злоумышленник может загрузить файл Excel, содержащий вредоносный скрипт или фишинговый URL-адрес. Приложение преобразует файл в PDF и пересылает его предполагаемому получателю для цифровой подписи. Поскольку гиперссылки в созданном PDF...

CVE-2025-56224

CVE-2025-56224 OTP обход проверки Описание злоумышленник может выдать себя за номер мобильного телефона другого пользователя и использовать эту уязвимость для проверки номера без знания кода OTP. Оценка CVSS: 8.1 Высокая Тип атаки Удалённая требуется аутентификация Затронутые версии Версии до 8.6...

CVE-2025-56221

CVE-2025-56221 Неправильное ограничение чрезмерных попыток аутентификации Описание Злоумышленник может выполнять неограниченное количество попыток аутентификации, что повышает риск компрометации целевых учетных записей пользователей путем подбора пароля. Оценка CVSS: 7.5 Высокая Тип атаки Удаленн...

CVE-2025-56219

CVE-2025-56219 Отсутствие ограничения скорости – API добавления пользователя Описание Злоумышленник может автоматизировать создание большого количества пользователей за короткий промежуток времени, что приведёт к DoS. Оценка CVSS: 7.1 Высокая Тип атаки Удалённая с аутентификацией Затронутые верси...

CVE-2025-54321

CVE-2025-54321 Reset Password Email Bombing Description The reset password function does not implement rate limiting for the target email address. This allows for an Email Bombing attack CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discoverer Yazan...

CVE-2025-54320

CVE-2025-54320 Invite User Email Bombing Description The invitation API does not implement rate limiting for the target email address. This allows for an Email Bombing attack. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Na...

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

EUVD-2025-209233

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

PT-2026-30683

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software developed by the British company Ascertia. Version 10.0 of Ascertia SigningHub contains a security vulnerability. This vulnerability stems from open redirection, allowing attackers to redirect users to malicious websites through a specially...

CVE-2025-61166: URL Redirection to Untrusted Site

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

CVE-2025-61166

An open redirect vulnerability exists in Ascertia SigningHub User v10.0 , an electronic signature software. Attackers can exploit this flaw by providing a crafted URL to redirect users to a malicious website. No specific remediation or exploit details are provided in the documents.

EUVD-2025-198073

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...