2772 matches found
CVE-2025-46739
CVE-2025-46739 describes unauthenticated brute-force against accounts with no rate limiting, potentially exposing credentials. Connected sources indicate affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software and related SEL devices; Blueframe OS) but do n...
CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts
An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...
PT-2025-20728 · Flytxt · Flytxt Neon-Dx
Name of the Vulnerable Software and Affected Versions: Flytxt NEON-dX version 0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c Description: The issue concerns the userId parameter in the change password function, allowing attackers to execute brute force attacks to discover user passwords. This could potential...
CVE-2023-34732
An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...
PT-2025-20711 · Schweitzer Engineering Laboratories · Sel Blueframe Os
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated user could discover account credentials via a brute-force attack without rate limiting. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-46833
Programs/P73SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been...
CVE-2025-46833
CVE-2025-46833 affects Programs/P73_SimplePythonEncryption.py, where RSA-based encryption prior to commit 6ce60b1 can be brute-forced, potentially compromising data. The vulnerability is mitigated in the patched commit 6ce60b1. Workarounds include increasing key sizes: RSA/DSA to at least 2048 bi...
Python-Programs 加密问题漏洞
Python-Programs is a collection of Python applications by the individual developer Shashikant Singh. Python-Programs suffers from an encryption issue vulnerability that stems from insufficient encryption strength, which could lead to a brute force cracking attack...
CVE-2025-3709
Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack...
CVE-2024-58135 Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default
Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...
CVE-2025-4222
CVE-2025-4222 is a WordPress Database Toolset plugin vulnerability affecting all versions up to 1.8.4. The issue is an unauthenticated exposure of sensitive information via publicly accessible database backup files. An index file is present, which means a brute-force attempt would be needed to ac...
PT-2025-18936 · WordPress · Database Toolset
Name of the Vulnerable Software and Affected Versions: Database Toolset plugin for WordPress versions up to, and including, 1.8.4 Description: The issue allows unauthenticated attackers to extract sensitive data from database backup files stored in a publicly accessible location. This is possible...
CVE-2025-3709
Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack...
CVE-2024-53591
An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...
CVE-2025-42600
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...
CVE-2025-42600
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...
CVE-2025-42600
CVE-2025-42600 affects Meon KYC solutions and is tied to missing restrictions on the number of incorrect OTP attempts in certain login API endpoints. The vulnerability allows brute-forcing OTPs and could enable unauthorized access to other user accounts. Documented details consistently describe t...
CVE-2025-42600 Brute Force Attack Vulnerability in Meon KYC solutions
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...
PT-2025-17611 · Unknown · Meon Kyc Solutions
Name of the Vulnerable Software and Affected Versions: Meon KYC solutions affected versions not specified Description: The issue is caused by missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of the login process. A remote attacker could...