98 matches found
CVE-2026-54338
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...
CVE-2022-38337
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service DoS for the user if services like fail2ban are used...
CVE-2023-4509
It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt...
PT-2025-43031
Name of the Vulnerable Software and Affected Versions langgenius/dify-web version 1.6.0 Description The authentication process in the software reveals whether user accounts exist by providing different error messages depending on whether a username or email is registered. Attempting to log in or...
EUVD-2014-3535
Malware in sbrugna...
EUVD-2001-0056
Malware in sbrugna...
EUVD-2016-5471
Malware in sbrugna...
EUVD-2010-0023
Malware in sbrugna...
EUVD-2005-4760
Malware in sbrugna...
EUVD-2021-20297
Malware in sbrugna...
EUVD-2003-1091
Malware in sbrugna...
EUVD-2008-3764
Malware in sbrugna...
EUVD-2021-13954
Malware in sbrugna...
CVE-2025-58582
CVE-2025-58582 affects SICK Enterprise Analytics and SICK Logistic Analytics. The issue stems from logging POST login data without validation, allowing unusually large payloads to be recorded. This can lead to uncontrolled resource consumption and potential impact on availability, as indicated by...
EUVD-2023-54364
Malicious code in bioql PyPI...
EUVD-2022-39799
Malicious code in bioql PyPI...
CVE-2024-44762
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...
CVE-2021-27188
The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...