CVE-2025-7882

CVE-2025-7882 affects Mercusys MW301R, specifically the Login component where improper restriction of excessive authentication attempts is exploitable from an adjacent network. The issue is characterized as low overall severity across CVSS metrics, with LOW impact on confidentiality/integrity and...

CVE-2025-7882 Mercusys MW301R Login excessive authentication

A vulnerability was found in Mercusys MW301R 1.0.2 Build 190726 Rel.59423n. It has been rated as problematic. This issue affects some unknown processing of the component Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack can only be initiated...

CVE-2025-4383

CVE-2025-4383 affects Art-in Bilişim Teknolojileri ve Yazılım Hizm. Tic. Ltd. Şti. Wi‑Fi Cloud Hotspot. The root cause is improper restriction of excessive authentication attempts, enabling authentication abuse and potential bypass. Impacts include confidential/ integrity concerns (I: Low; A: Hig...

CVE-2025-5864 Tenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication

A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of...

CVE-2025-5864 Tenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication

A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of...

CVE-2025-5864

The CVE-2025-5864 entry affects Tenda TDSEE App versions up to 1.7.12, targeting the file /app/ConfirmSmsCode in the Password Reset Confirmation Code Handler. The root cause is improper restriction of excessive authentication attempts, with the attack described as executable remotely and of high ...

PT-2025-24407 · Tenda · Tenda Tdsee App

Name of the Vulnerable Software and Affected Versions: Tenda TDSEE App versions 1.7.12 and earlier Description: A vulnerability was found in the Tenda TDSEE App, affecting an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. This lead...

Tenda TDSEE 安全漏洞

Tenda TDSEE App is an application from Tenda China for managing Tenda brand camera products. A security vulnerability exists in the Tenda TDSEE App that can be exploited by attackers to cause excessive authentication attempts...

CVE-2024-21500

All versions of the package github.com/greenpau/caddy-security are vulnerable to Improper Restriction of Excessive Authentication Attempts via the two-factor authentication 2FA. Although the application blocks the user after several failed attempts to provide 2FA codes, attackers can bypass this...

CVE-2024-3202

A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4. This issue affects some unknown processing of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated...

CVE-2024-38888

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform a Password Brute Forcing attack due to improper restriction of excessive authentication attempts...

CVE-2024-35747

Improper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget allows Functionality Bypass.This issue affects Contact Form Builder, Contact Widget: from n/a through 2.1.7...

CVE-2024-5682

Improper Restriction of Excessive Authentication Attempts vulnerability in Yordam Information Technology Yordam Library Automation System allows Interface Manipulation. This issue affects Yordam Library Automation System: before 20.1...

CVE-2023-48745

Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha Code: from n/a through 2.9...

CVE-2023-1665

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0...

CVE-2023-1539

Improper Restriction of Excessive Authentication Attempts in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-0860

Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4...

CVE-2023-23730

Improper Restriction of Excessive Authentication Attempts vulnerability in Brainstorm Force Spectra allows Functionality Bypass.This issue affects Spectra: from n/a through 2.3.0...

CVE-2022-22810

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly homeLYnk V2.6.2 and prior, fellerLYn...

CVE-2025-46739

CVE-2025-46739 describes unauthenticated brute-force against accounts with no rate limiting, potentially exposing credentials. Connected sources indicate affected Schweitzer Engineering Laboratories products (e.g., SEL-5033 acSELerator RTAC software and related SEL devices; Blueframe OS) but do n...