Lucene search
+L

894 matches found

Cvelist
Cvelist
added 2026/02/18 12:9 p.m.26 views

CVE-2025-7630 OTP Password Brute Forcing in DorukNet's Wispotter

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force. This issue affects Wispotter: from 1.0 before v2025.10.08.1...

5.3CVSS0.00236EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.21 views

PT-2026-20383

Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Industry and Trade Inc. Wispotter allows Password Brute Forcing, Brute Force.This issue affects Wispotter: from 1.0 before v2025.10.08.1...

5.3CVSS5.5AI score0.00236EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/07 8:15 p.m.6 views

CVE-2026-2110

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

8.1CVSS4.9AI score0.00681EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/07 8:2 p.m.47 views

CVE-2026-2110 Tasin1025 SwiftBuy login.php excessive authentication

A security flaw has been discovered in Tasin1025 SwiftBuy up to 0f5011372e8d1d7edfd642d57d721c9fadc54ec7. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing a manipulation results in improper restriction of excessive authentication attempts. Remote...

6.3CVSS0.00681EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/07 8:2 p.m.27 views

CVE-2026-2110

CVE-2026-2110 affects Tasin1025 SwiftBuy, with an issue in the /login.php functionality that allows manipulation leading to improper restriction of excessive authentication attempts. The attack is network-based, high complexity, no privileges required, no user interaction, and could be remotely e...

8.1CVSS4.3AI score0.00681EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.12 views

SwiftBuy 安全漏洞

SwiftBuy is an e-commerce website developed by MD Tasin Rahman. The version 0f5011372e8d1d7edfd642d57d721c9fadc54ec7 and earlier versions of SwiftBuy have security vulnerabilities. These vulnerabilities stem from incorrect handling of the /login.php file, which may lead to improper restrictions o...

8.1CVSS5.8AI score0.00681EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/02/03 12:30 p.m.10 views

Moodle Affected by Improper Restriction of Excessive Authentication Attempts

A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts...

7.5CVSS5.5AI score0.00417EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/31 3:21 p.m.13 views

CVE-2026-1685

A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high...

6.3CVSS5.5AI score0.00987EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.12 views

D-Link DIR-823X security vulnerabilities

The D-Link DIR-823X is a wireless router produced by D-Link Corporation. The D-Link DIR-823X 250416 version has a security vulnerability. This vulnerability stems from an improper limitation on authentication attempts in the sub40AC74 function of the Login component, which may lead to brute-force...

6.3CVSS5.8AI score0.00987EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/27 3:19 a.m.13 views

CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

4.2CVSS5.1AI score0.00348EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/26 12:16 a.m.6 views

CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

4.2CVSS4.9AI score0.00348EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/26 12:16 a.m.11 views

CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

4.2CVSS0.00348EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/01/26 12:0 a.m.15 views

Beetel 777VR1 security vulnerabilities

Beetel 777VR1 is a router produced by the Beetel company. Versions of Beetel 777VR1 prior to 01.00.09/01.00.0955 contain security vulnerabilities. These vulnerabilities stem from improper handling of the UART interface components, which may lead to an improper limit on the number of authenticatio...

4.2CVSS5.8AI score0.00348EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/25 11:32 p.m.6 views

CVE-2026-1409 Beetel 777VR1 UART excessive authentication

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

2CVSS5.1AI score0.00348EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/25 11:32 p.m.9 views

CVE-2026-1409

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.0955. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the physic...

2CVSS5.1AI score0.00348EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/25 12:0 a.m.12 views

PT-2026-4679

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09 55. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack on the...

2CVSS4.4AI score0.00348EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 p.m.11 views

CVE-2025-4319

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation.This issue affects Sufirmam: through 23012026. NOTE: The...

9.4CVSS5.3AI score0.00369EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.11 views

PT-2026-4352

Name of the Vulnerable Software and Affected Versions Birebirsoft Software and Technology Solutions Sufirmam versions through 23012026 Description The software exhibits issues related to excessive authentication attempts and a weak password recovery mechanism. This allows for potential brute forc...

9.4CVSS5.9AI score0.00369EPSS
SaveExploits0References6
NVD
NVD
added 2026/01/22 11:15 p.m.6 views

CVE-2025-53968

This vulnerability arises because there are no limitations on the number of authentication attempts a user can make. An attacker can exploit this weakness by continuously sending authentication requests, leading to a denial-of-service DoS condition. This can overwhelm the authentication system,...

7.5CVSS0.00376EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 10:37 p.m.4 views

CVE-2025-53968 EVMAPA Improper Restriction of Excessive Authentication Attempts

This vulnerability arises because there are no limitations on the number of authentication attempts a user can make. An attacker can exploit this weakness by continuously sending authentication requests, leading to a denial-of-service DoS condition. This can overwhelm the authentication system,...

7.5CVSS5.6AI score0.00376EPSS
SaveExploits0References2
Rows per page
Query Builder