Lucene search
+L

2139 matches found

CNVD
CNVD
added 2025/09/05 12:0 a.m.9 views

Akinsoft MyRezzta Authentication Bypass Vulnerability

Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta, which stems from improperly limiting authentication attempts and could lead to authentication bypass, password recovery exploitation, and brute-force breakin...

9.8CVSS7AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/03 9:15 a.m.6 views

CVE-2025-1740

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01...

9.8CVSS0.00421EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/03 8:52 a.m.6 views

CVE-2025-1740 Authentication Bypass in Akinsoft's MyRezzta

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01...

9.8CVSS5.4AI score0.00421EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/03 8:52 a.m.5 views

CVE-2025-1740

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01...

9.8CVSS5.4AI score0.00421EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.7 views

Akinsoft MyRezzta 安全漏洞

Aiseesoft is a technology company specializing in software development. An authentication bypass vulnerability exists in Akinsoft MyRezzta, which stems from improperly limiting authentication attempts and could lead to authentication bypass, password recovery exploitation, and brute-force breakin...

9.8CVSS7AI score0.00421EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.8 views

PT-2025-35704

Name of the Vulnerable Software and Affected Versions Akinsoft MyRezzta versions s2.03.01 through v2.05.01 Description An improper restriction of excessive authentication attempts issue exists in Akinsoft MyRezzta, potentially allowing authentication bypass, password recovery exploitation, and...

9.8CVSS5.4AI score0.00421EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/08/31 5:14 p.m.7 views

CVE-2025-9660

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS7.2AI score0.00483EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/29 5:15 p.m.10 views

CVE-2025-9660

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS0.00483EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/29 4:32 p.m.22 views

CVE-2025-9660

CVE-2025-9660 affects SourceCodester Bakeshop Online Ordering System 1.0. The vulnerability lies in the /passwordrecover.php file where manipulation of the phonenumber parameter enables SQL injection. Reports indicate the issue is remotely exploitable and that the exploit has been publicly disclo...

9.8CVSS7.3AI score0.00483EPSS
SaveExploits1References5Affected Software1
Packet Storm News
Packet Storm News
added 2025/08/25 12:0 a.m.7 views

Hashcat Advanced Password Recovery 7.1.2 Source Code

Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on highly iterated modern hashes, single dictionary-based attacks, and more. This is the source code...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2025/08/20 12:0 a.m.3 views

Online Shopping Portal Project password-recovery.php File SQL Injection Vulnerability

Online Shopping Portal Project is an online shopping portal project. A SQL injection vulnerability exists in Online Shopping Portal Project, which originates from the lack of validation of externally-entered SQL statements in the parameter emailid in the file /shopping/password-recovery.php. An...

9.8CVSS8.3AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/18 6:15 a.m.10 views

CVE-2025-9109

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

6.3CVSS0.004EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/18 6:2 a.m.24 views

CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

6.3CVSS0.004EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/18 6:2 a.m.33 views

CVE-2025-9109

CVE-2025-9109 affects Portabilis i-Diario up to version 1.5.0, specifically the Password Recovery Endpoint at /password/email. The issue is a discrepancy in responses that can be exploited remotely, with high complexity, and an exploit has been publicly released. Multiple connected sources corrob...

6.3CVSS7.1AI score0.004EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/18 6:2 a.m.4 views

CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

6.3CVSS7.1AI score0.004EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/18 6:2 a.m.8 views

CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

6.3CVSS5.2AI score0.004EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/18 12:0 a.m.15 views

PT-2025-33638 · Portabilis · Portabilis I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions prior to 1.5.1 Description: A security flaw has been discovered in Portabilis i-Diario. The vulnerability affects an unknown functionality of the file /password/email within the Password Recovery Endpoint componen...

6.3CVSS4AI score0.004EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/08/18 12:0 a.m.6 views

Portabilis i‑Diário 安全漏洞

Portabilis i-Diário is an open source school academic calendar and teacher interaction management system from Portabilis, Brazil. A security vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from a difference in response time of the component Password Recovery...

6.3CVSS6.8AI score0.004EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/08/17 6:33 a.m.11 views

CVE-2025-9013

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS7.8AI score0.00403EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/15 6:15 a.m.11 views

CVE-2025-9013

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

9.8CVSS5.8AI score0.00403EPSS
SaveExploits0References5
Rows per page
Query Builder