6736 matches found
EUVD-2025-32507
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials...
SICK AG Tire Analytics 安全漏洞
SICK AG Tire Analytics is a tire analysis software from SICK AG, Germany. A security vulnerability exists in SICK AG Tire Analytics that stems from not implementing sufficient measures to prevent multiple authentication failures within a short period of time, which could lead to a brute force...
CVE-2025-59152: Reliance on Untrusted Inputs in a Security Decision
Litestar is an Asynchronous Server Gateway Interface ASGI framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. Litestar's RateLimitMiddleware uses...
Encoded Jamming Secure Communication for RIS-Assisted and ISAC Systems
This paper considers a cooperative jamming CJ-aided secure wireless communication system. Conventionally, the jammer transmits Gaussian noise GN to enhance security; however, the GN scheme also degrades the legitimate receiver's performance. Encoded jamming EJ mitigates this interference but does...
PT-2025-40902
Name of the Vulnerable Software and Affected Versions Litestar versions prior to 2.18.0 Description Litestar is an Asynchronous Server Gateway Interface ASGI framework. In version 2.17.0, rate limits can be bypassed by manipulating the X-Forwarded-For header. The RateLimitMiddleware uses cache ke...
Litestar 安全漏洞
Litestar is a powerful, flexible but stubborn ASGI framework open-sourced by Litestar. A security vulnerability exists in Litestar version 2.17.0 that stems from unconditional trust in the X-Forwarded-For header, which could lead to bypassing rate limiting...
NatGVD: Natural Adversarial Example Attack Towards Graph-Based Vulnerability Detection
Graph-based models learn rich code graph structural information and present superior performance on various code analysis tasks. However, the robustness of these models against adversarial example attacks in the context of vulnerability detection remains an open question. This paper proposes...
PT-2025-40867
Name of the Vulnerable Software and Affected Versions Web Application Crede affected versions not specified Description The application lacks adequate protection against brute-force attacks on authentication. Specifically, it does not limit the number of failed login attempts within a defined...
CVE-2022-50508
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt76x0: fix oob access in mt76x0phygettargetpower After 'commit ba45841ca5eb "wifi: mt76: mt76x02: simplify struct mt76x02ratepower"', mt76x02 relies on ht0-7 ratepower data for vht mcs0,7, while it uses vth0-1...
EUVD-2024-51573
Malicious code in bioql PyPI...
EUVD-2024-50761
Malicious code in bioql PyPI...
EUVD-2022-35019
Malicious code in bioql PyPI...
EUVD-2025-15847
Malicious code in bioql PyPI...
EUVD-2022-39481
Malicious code in bioql PyPI...
EUVD-2025-1853
Malicious code in bioql PyPI...
EUVD-2025-18917
Malicious code in bioql PyPI...
EUVD-2025-19546
Malicious code in bioql PyPI...
EUVD-2023-43837
Malicious code in bioql PyPI...