CVE-2025-52392

Soosyze CMS 2.0 is vulnerable to brute-force login attacks due to a lack of rate-limiting and account lockout mechanisms on the /user/login endpoint. This flaw (CWE-307) allows an attacker to submit unlimited POST requests with known credentials and a password wordlist, potentially leading to una...

PT-2023-24767 · Tgstation · Tgstation

Name of the Vulnerable Software and Affected Versions: TGstation versions prior to 5.12.5 Description: TGstation is a toolset to manage production BYOND servers. In affected versions, if a Windows user was registered in tgstation-server TGS, an attacker could discover their username by...