733 matches found
Nagios Fusion 安全漏洞
Nagios Fusion is a centralized monitoring and visualization platform from Nagios Corporation, USA. A security vulnerability exists in Nagios Fusion version v2024R1.2 and v2024R2, which stems from a lack of rate limiting in the OTP authentication component, which could lead to a brute force attack...
CVE-2025-61482
The privacyIDEA Authenticator v.4.3.0 on Android is vulnerable to a flaw in how it handles OTP/TOTP/HOTP values. A local attacker with root access can bypass two-factor authentication by hooking into the application's cryptographic routines to intercept decryption paths. This allows the attacker ...
CVE-2025-61482
Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...
privacyIDEA Authenticator 安全漏洞
privacyIDEA Authenticator is a login authentication application from the privacyIDEA organization. A security vulnerability exists in privacyIDEA Authenticator version 4.3.0 that stems from improper handling of OTP/TOTP/HOTP values, which could allow a local attacker to bypass dual authentication...
EUVD-2025-36185
Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...
WordPress Orion SMS OTP Verification plugin elevation of privilege vulnerability
WordPress Orion SMS OTP Verification plugin is an authentication plugin for WordPress that enables user verification by sending a one-time password OTP via text message SMS. An elevation of privilege vulnerability exists in the WordPress Orion SMS OTP Verification plugin, which can be exploited b...
EUVD-2025-35049
A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...
CVE-2025-56224
A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...
CVE-2025-56224
The SigningHub platform by Ascertia is vulnerable to a brute-force attack due to a lack of rate limiting in the One-Time Password (OTP) verification endpoint . An attacker can automate high-volume guesses to bypass the verification mechanism for mobile numbers, potentially allowing them to impers...
CVE-2025-56224
A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...
CVE-2025-56224
A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...
SigningHub 安全漏洞
SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from a lack of rate limiting in the one-time password verification endpoint, which could lead to a brute force attack to bypass the verification...
CVE-2025-9967
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
CVE-2025-9967 Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
CVE-2025-9967 Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
WordPress plugin Orion SMS OTP Verification 安全漏洞
WordPress Orion SMS OTP Verification plugin is an authentication plugin for WordPress that enables user verification by sending a one-time password OTP via text message SMS. An elevation of privilege vulnerability exists in the WordPress Orion SMS OTP Verification plugin, which can be exploited b...
PT-2025-42226
Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8 Description A missing rate limit in the One-Time Password OTP verification endpoint allows attackers to bypass verification through a bruteforce attack. An attacker can impersonate another user’s mobile number and veri...
EUVD-2001-1150
Malware in sbrugna...