SigningHub 安全漏洞

SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from a lack of rate limiting in the component /Home/UploadStreamDocument, which could lead to a denial of service attack...

CVE-2025-56219

Ascertia SigningHub version v8.6.8 and earlier are vulnerable to a security flaw where the Add User API lacks proper rate limiting and has incorrect access control . This oversight allows an authenticated attacker to automatically create an excessive number of user accounts in a short period. The...

SigningHub 安全漏洞

SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from a lack of rate limiting in the one-time password verification endpoint, which could lead to a brute force attack to bypass the verification...

SigningHub 安全漏洞

SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version v8.6.8, which stems from improper access control and no rate limiting, which could lead to resource exhaustion and denial of service attacks...

CVE-2025-56223

The SigningHub electronic signature platform, developed by Ascertia , is vulnerable to a Denial of Service (DoS) attack in versions 8.6.8 .

CVE-2025-56224

A lack of rate limiting in the One-Time Password OTP verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack...

BreakFun: Jailbreaking LLMs Via Schema Exploitation

The proficiency of Large Language Models LLMs in processing structured data and adhering to syntactic rules is a capability that drives their widespread adoption but also makes them paradoxically vulnerable. In this paper, we investigate this vulnerability through BreakFun, a jailbreak methodolog...

EUVD-2025-34910

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

CVE-2025-56221

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

CVE-2025-56221

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708...

PT-2025-42643

Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8 Description A missing rate limit in the login process enables attackers to circumvent authentication through brute-force attempts. The issue affects the login mechanism and could allow unauthorized access...

CVE-2025-56221

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

SigningHub 安全漏洞

SigningHub is an electronic signature platform from SigningHub UK. A security vulnerability exists in SigningHub version 8.6.8, which stems from a lack of rate limiting in the login mechanism and could lead to a brute force attack to bypass authentication...

CVE-2025-56221

The SigningHub electronic signature platform, specifically version 8.6.8 and earlier, is vulnerable to a brute-force attack due to a lack of rate limiting in its login mechanism. This flaw affects the Authentication API (/authenticate) , allowing an attacker to make unlimited authentication attem...

CVE-2025-56221

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

CVE-2025-56221: Improper Restriction of Excessive Authentication Attempts

A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...

CVE-2025-62399

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...

CVE-2025-56748

Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...

Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks

Large language models LLMs are increasingly vulnerable to multi-turn jailbreak attacks, where adversaries iteratively elicit harmful behaviors that bypass single-turn safety filters. Existing defenses predominantly rely on passive rejection, which either fails against adaptive attackers or overly...