81 matches found
CVE-2026-92082
By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see ...
CVE-2026-92082
Payara Server is vulnerable to brute-force login attacks because, by default, it does not limit the number of failed login attempts. The attack vector is adjacent network (AV:A) with low complexity and no privileges required, rated CVSS 4.0 6.3 (MEDIUM) with low confidential impact on the vulnera...
CVE-2026-41037 Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470
This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...
CVE-2026-41037 Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470
This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...
CVE-2026-41037
This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...
EUVD-2016-7079
Malware in sbrugna...
EUVD-2009-0050
Malware in sbrugna...
EUVD-2016-4098
Malware in sbrugna...
EUVD-2016-4017
Malware in sbrugna...
EUVD-2012-4513
Malware in sbrugna...
EUVD-2017-6116
Malware in sbrugna...
EUVD-2006-6054
Malware in sbrugna...
EUVD-2009-2370
Malware in sbrugna...
EUVD-2001-0960
Malware in sbrugna...
CVE-2025-58586
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
PT-2025-40867
Name of the Vulnerable Software and Affected Versions Web Application Crede affected versions not specified Description The application lacks adequate protection against brute-force attacks on authentication. Specifically, it does not limit the number of failed login attempts within a defined...
EUVD-2021-30215
Malicious code in bioql PyPI...
EUVD-2024-50148
Malicious code in bioql PyPI...