1227 matches found
CVE-2025-63700
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-63700
...
CVE-2025-63700
Clerk-js 5.88.0 contains a security issue where an attacker can bypass the OAuth authentication flow by manipulating the OTP verification request. The publicly documented evidence across sources (Red Hat CVE notes, EUVD, GHSA advisory, and OSV/GHSA mirrors) consistently reference the OTP verifica...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-3243...
PT-2025-45530
URGENT: Critical Erlang/OTP vulnerabilities patched in OpenSuSE update 2025-15706-1. Includes a high-severity shell escape flaw CVE-2024-24357 leading to RCE. Read more: 👉 https://t.co/2N8otqQfDH Security OpenSUSE https://t.co/eRLTzqyYll...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: The EEPROM and OTP sizes for PCI1xxxx devices have been modified. The maximum OTP and EEPROM sizes for PCI1xxxx devices are 8 Kb and 64 Kb respectively. The maximum size definitions have been adjusted, and the corre...
CVE-2025-60424
A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack...
EUVD-2025-36197
A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack...
PT-2025-43977
Name of the Vulnerable Software and Affected Versions Nagios Fusion versions 2024R1.2 through 2024R2 Description A missing rate limit in the OTP verification component allows attackers to bypass authentication through brute-force attacks. Recommendations Apply a rate limit to the OTP verification...
CVE-2025-61482
Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...
CVE-2025-56224
A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...
CVE-2025-9967
CVE-2025-9967 concerns the WordPress plugin Orion SMS OTP Verification. The vulnerability is an authentication bypass enabling privilege escalation via account takeover in versions
WordPress Orion SMS OTP Verification plugin <= 1.1.7 - Authentication Bypass via Account Takeover vulnerability
Authentication Bypass via Account Takeover vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Orion SMS OTP Verification versions = 1.1.7...
EUVD-2013-5269
Malware in sbrugna...
EUVD-2019-16762
Malware in sbrugna...
EUVD-2020-5153
Malware in sbrugna...
EUVD-2020-19927
Malware in sbrugna...
EUVD-2015-2864
Malware in sbrugna...