CVE-2025-52392

CVE-2025-52392 affects Soosyze CMS 2.0. The root cause is missing rate-limiting and account lockout on the /user/login endpoint, enabling brute-force login attempts and potentially unauthorized administrative access. Public sources in connected documents describe a brute-force tool and PoC usage,...

PT-2023-24767 · Tgstation · Tgstation

Name of the Vulnerable Software and Affected Versions: TGstation versions prior to 5.12.5 Description: TGstation is a toolset to manage production BYOND servers. In affected versions, if a Windows user was registered in tgstation-server TGS, an attacker could discover their username by...