droidclaw 安全漏洞

Droidclaw is an open-source AI tool developed by Unitedby AI U/AI, which allows for control of Android phones through natural language commands. Droidclaw versions 0.5.3 and earlier contain security vulnerabilities. These vulnerabilities stem from an improper limit on the number of authentication...

CVE-2026-1816

TEİAŞ’s Mobile Application is affected by CVE-2026-1816: an improper restriction of excessive authentication attempts that enables brute-force attacks. Affected versions are 1.6.2 up to 1.13 (not inclusive). The CVSS 3.1 baseline is 6.3 (MEDIUM) with network attack vector, low privileges required...

The vulnerability of the Wazuh security monitoring and threat detection platform lies in its insufficient limit on authentication attempts, which allows attackers to compromise privacy and integrity.

The vulnerability of the Wazuh security monitoring and threat detection platform lies in the insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Zyxel WRE6505 安全漏洞

Zyxel WRE6505 is a wireless signal expansion device produced by Zyxel Corporation in China. The Zyxel WRE6505 v2 V1.00ABDV.3C0 version contains a security vulnerability. This vulnerability stems from the improper limit on the number of authentication attempts made by the web management interface...

IGL-Technologies eParking.fi 安全漏洞

IGL-Technologies eParking.fi is an intelligent parking platform provided by IGL-Technologies, offering features for parking management, charging, and parking space monitoring. IGL-Technologies eParking.fi has a security vulnerability. This vulnerability stems from the lack of a limit on the numbe...

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, stems from insufficient restrictions on authentication attempts. This allows a malicious actor to circumvent existing security restrictions.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can...

The vulnerability of Fortinet FortiWeb network firewalls lies in insufficient control over the frequency of interactions between devices. This allows attackers to circumvent the limit on the number of authentication attempts.

The vulnerability of Fortinet FortiWeb network firewalls is related to insufficient control over the frequency of interactions. Exploiting this vulnerability allows a malicious actor to circumvent the limit on the number of authentication attempts through specially crafted requests...

CVE-2026-27778 ePower epower.ie Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

Chargemap 安全漏洞

Chargemap is a electric vehicle service platform website operated by the French company Chargemap. Chargemap has a security vulnerability, which stems from the lack of an authentication request limit on the WebSocket API. This vulnerability could lead to denial-of-service attacks or brute-force...

CVE-2026-25113 SWITCH EV swtchenergy.com Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain...

The vulnerability of the sub_40AC74() function in D-link DIR-823X router microprogramming software allows a attacker to execute a brute-force attack.

The vulnerability of the sub40AC74 function in D-link DIR-823X router microprogramming software is related to an improper limitation on the number of authentication attempts. Exploiting this vulnerability could allow a remote attacker to execute a brute-force attack...

PT-2026-5404

A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub 40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high...

The vulnerability of Tenda W30E wireless Wi-Fi routers’ microprogramming software, related to insufficient authentication attempts limits, allows attackers to carry out brute-force attacks.

The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to carry out an attack using brute-force methods...

The vulnerability of the software implementation of the OTP mechanism for customer identity verification by KYC Solutions allows a perpetrator to gain unauthorized access to user accounts.

The vulnerability of the software implementation for the KYC Solutions’ customer identity verification mechanism is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user...

EUVD-2025-201499

Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

Dell CloudBoost Virtual Appliance 安全漏洞

Dell CloudBoost Virtual Appliance is a storage solution software from Dell USA. A security vulnerability exists in Dell CloudBoost Virtual Appliance version 19.13.0.0 and prior versions, which stems from an improper limit on the number of authentication attempts, which could lead to unauthorized...

The vulnerability of the software for controlling EPSON WebConfig and EPSON Web Control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to device settings.

The vulnerability of the software for controlling EPSON WebConfig and EPSON Web Control devices is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to device settings...

CVE-2025-10161

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This...

CVE-2025-10928 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-108

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.5...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force via insufficient enforcement of authentication attempt limits in the authentication process. An attacker can gain unauthorized access to user accounts by performing automated brute-force attacks against OTP, TOTP, or passwor...