Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 5:13 a.m.1 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.00175EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/06 6:33 p.m.5 views

EUVD-2025-209233

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.00175EPSS
Exploits1References3
NVD
NVD
added 2026/04/06 6:16 p.m.2 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS0.00175EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/06 12:0 a.m.17 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

0.00175EPSS
Exploits1References2
CVE
CVE
added 2026/04/06 12:0 a.m.10 views

CVE-2025-61166

The CVE-2025-61166 entry describes an open redirect in Ascertia SigningHub User v10.0 that lets an attacker redirect authenticated users to a malicious site via a crafted URL. Affected product: Ascertia SigningHub User 10.0 (component: open redirect functionality). Root cause: misimplementation o...

6.1CVSS5.8AI score0.00175EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.9 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software developed by the British company Ascertia. Version 10.0 of Ascertia SigningHub contains a security vulnerability. This vulnerability stems from open redirection, allowing attackers to redirect users to malicious websites through a specially...

6.1CVSS5.8AI score0.00175EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30683

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

5.8AI score0.00175EPSS
Exploits1References3
EUVD
EUVD
added 2025/11/18 9:32 p.m.4 views

EUVD-2025-198073

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

6.3AI score0.00409EPSS
Exploits0References3
NVD
NVD
added 2025/11/18 7:15 p.m.3 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS0.00409EPSS
Exploits0References2
OSV
OSV
added 2025/11/18 7:15 p.m.5 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS5.8AI score0.00409EPSS
Exploits0References2
NVD
NVD
added 2025/11/18 7:15 p.m.3 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS0.00287EPSS
Exploits0References2
OSV
OSV
added 2025/11/18 7:15 p.m.3 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS5.8AI score0.00287EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/18 12:0 a.m.6 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

0.00409EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.3 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software from Ascertia UK. A security vulnerability exists in Ascertia SigningHub version 8.6.8 and prior versions, which stems from a lack of rate limiting in the reset password function and could lead to email bombing...

9.8CVSS6.7AI score0.00409EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.4 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software from Ascertia UK. A security vulnerability exists in Ascertia SigningHub version 8.6.8 and prior versions, which stems from a lack of rate limiting in the Invite Users feature and could lead to email bombing...

4.3CVSS6.6AI score0.00287EPSS
Exploits0References3
CVE
CVE
added 2025/11/18 12:0 a.m.12 views

CVE-2025-54320

In Ascertia SigningHub up to version 8.6.8, the Invite Users function lacks rate limiting, enabling an authenticated attacker to automate invites and trigger an email bombing scenario. Affected software: Ascertia SigningHub (versions through 8.6.8). Underlying issue: insufficient throttling on th...

4.3CVSS6.3AI score0.00287EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/11/18 12:0 a.m.9 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

0.00287EPSS
Exploits0References2
Rows per page
Query Builder