Lucene search
+L

634 matches found

Cvelist
Cvelist
added 2025/09/02 1:28 p.m.13 views

CVE-2025-2413 OTP Bypass in Akinsoft's ProKuafor

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass. This issue affects ProKuafor: from s1.02.08 before v1.02.08...

8.6CVSS0.00325EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 1:28 p.m.21 views

CVE-2025-2413

CVE-2025-2413 is linked to an improper restriction of excessive authentication attempts in Akinsoft ProKuafor, enabling an authentication bypass. The issue affects ProKuafor versions from s1.02.08 before v1.02.08. APT/mitigation notes in connected PT-Security记录 recommend updating to version 1.02....

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 1:28 p.m.3 views

CVE-2025-2413 OTP Bypass in Akinsoft's ProKuafor

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass. This issue affects ProKuafor: from s1.02.08 before v1.02.08...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/02 11:52 a.m.20 views

CVE-2025-2414

CVE-2025-2414 relates to an authentication bypass in Akinsoft OctoCloud caused by an improper restriction of excessive authentication attempts. Affected versions are s1.09.03 through 1.11.00, with the issue present prior to 1.11.01. The vulnerability could allow bypass of authentication without u...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/02 11:52 a.m.20 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS0.00325EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/02 11:52 a.m.5 views

CVE-2025-2414 OTP Bypass in Akinsoft's OctoCloud

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 12:48 p.m.8 views

CVE-2025-2412 OTP Bypass in Akinsoft's QR Menu

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass. This issue affects QR Menu: from s1.05.07 before v1.05.12...

8.6CVSS0.00325EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/01 12:48 p.m.3 views

CVE-2025-2412 OTP Bypass in Akinsoft's QR Menu

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass. This issue affects QR Menu: from s1.05.07 before v1.05.12...

8.6CVSS5.4AI score0.00325EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-22189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that...

7.2CVSS7AI score0.00655EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.16 views

CVE-2025-50503

A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide ...

8.8CVSS7.8AI score0.0036EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.7 views

Touch Lebanon Mobile App 安全漏洞

Touch Lebanon Mobile App is a free application from Touch Lebanon. A security vulnerability exists in Touch Lebanon Mobile App version 2.20.2, which stems from a flaw in the password reset process that could lead to a bypass of the OTP mechanism...

8.8CVSS6.8AI score0.0036EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/20 12:0 a.m.13 views

CVE-2025-50503

A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide ...

0.0036EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/20 12:0 a.m.3 views

CVE-2025-50503

A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide ...

7AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.8 views

PT-2025-34054 · Unknown · Touch Lebanon Mobile App

Name of the Vulnerable Software and Affected Versions: Touch Lebanon Mobile App version 2.20.2 Description: A flaw exists in the password reset workflow that allows an attacker to bypass the one-time password OTP reset password mechanism. By manipulating the reset process, an unauthorized user ma...

8.8CVSS6.6AI score0.0036EPSS
SaveExploits0References5
CVE
CVE
added 2025/08/20 12:0 a.m.21 views

CVE-2025-50503

The CVE-2025-50503 entry concerns Touch Lebanon Mobile App 2.20.2, where a flaw in the password reset workflow enables bypassing the OTP mechanism, potentially allowing an unauthorized user to reset a password and access an account without a legitimate authentication factor. The incident is descr...

8.8CVSS7.7AI score0.0036EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/17 3:28 a.m.18 views

CVE-2025-8342

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS7.7AI score0.00636EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/15 3:15 a.m.17 views

CVE-2025-8342

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS0.00636EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/15 2:24 a.m.21 views

CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS0.00636EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/15 2:24 a.m.9 views

CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS7.6AI score0.00636EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.11 views

PT-2025-33428 · WordPress · Woocommerce Otp Login With Phone Number

Name of the Vulnerable Software and Affected Versions: WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress versions up to and including 1.8.47 Description: The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is susceptible to authenticatio...

8.1CVSS6.9AI score0.00636EPSS
SaveExploits0References8
Rows per page
Query Builder