893 matches found
CVE-2025-3555
A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...
CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication
A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...
CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication
A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...
PT-2025-16208 · Unknown · Scriptandtools Ecommerce-Website-In-Php
Name of the Vulnerable Software and Affected Versions: ScriptAndTools eCommerce-website-in-PHP version 3.0 Description: A problematic issue has been identified in the software. The issue involves improper restriction of excessive authentication attempts, potentially allowing remote attacks. The...
CVE-2025-3129
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...
CVE-2025-3129
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...
CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...
CVE-2025-3129
CVE-2025-3129 affects the Drupal Access code module. The vulnerability is caused by an improper restriction of excessive authentication attempts, enabling brute-force login for versions 0.0.0 through 2.0.3. Exploitation details are not provided in the available documents. The issue is mitigated b...
CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...
CVE-2025-3129 Access code - Moderately critical - Access bypass - SA-CONTRIB-2025-028
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...
CVE-2025-2911
The CVE-2025-2911 entry pertains to MeetMe products with versions prior to 2024-09, where an unauthorized access path exists to the Call Forwarding Service. The underlying issue allows an attacker to identify multiple users and perform brute-force attempts via extensions. Publicly available refer...
CVE-2025-2911 Improper Restriction of Excessive Authentication Attempts vulnerability in MeetMe products
Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...
Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortideceptor
CVE-2023-26209 Exploit Automation Para Fins Educacionais 🚨 📌...
Exploit for Improper Restriction of Excessive Authentication Attempts in Fortinet Fortiauthenticator
CVE-2023-26208 Exploit Automation Para Fins Educacionais 🚨 📌...
CVE-2025-1496
Improper Restriction of Excessive Authentication Attempts vulnerability in BG-TEK Coslat Hotspot allows Password Brute Forcing, Authentication Abuse. This issue affects Coslat Hotspot: before 6.26.0.R.20250227...
CVE-2024-12039 Improper Restriction of Excessive Authentication Attempts in langgenius/dify
langgenius/dify version v0.10.1 contains a vulnerability where there are no limits applied to the number of code guess attempts for password reset. This allows an unauthenticated attacker to reset owner, admin, or other user passwords within a few hours by guessing the six-digit code, resulting i...
CVE-2025-30235
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled...
CVE-2025-30235
The CVE-2025-30235 entry concerns Shearwater SecurEnvoy SecurAccess Enrol prior to version 9.4.515. The vulnerability arises from improper handling of concurrent authentication attempts, allowing hundreds of failed logins before detection rather than limiting to the intended threshold of 10. This...
CVE-2025-30235
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled...