CVE-2022-2778

In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes...

CVE-2022-2778

In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes...

CVE-2022-2778

CVE-2022-2778 affects Octopus Deploy. The connected documents describe a vulnerability that allows bypassing login rate limiting by using null bytes, enabling potential repeated login attempts without proper throttling. The description consistently ties this to Octopus Deploy implementations and ...

CVE-2022-2778: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes...

CVE-2022-36781

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting...

CVE-2022-36781

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting...

CVE-2022-36781 ConnectWise - ScreenConnect Session Code Bypass

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting...

CVE-2022-36781

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting...

Yelp: no rate limit in forgot password session

A little bit about Rate Limit: A rate limiting algorithm is used to check if the user session or IP-address has to be limited based on the information in the session cache. In case a client made too many requests within a given timeframe, HTTP-Servers can respond with status code 429: Too Many...

PT-2022-23620 · Connectwise · Connectwise Screenconnect

Name of the Vulnerable Software and Affected Versions: ConnectWise ScreenConnect versions 22.6 and below Description: The issue allows potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this to gain...

WordPress Rate my Post - WP Rating System Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

CVE-2022-36781: Improper Restriction of Excessive Authentication Attempts

ConnectWise ScreenConnect versions 22.6 and below contained a flaw allowing potential brute force attacks on custom access tokens due to inadequate rate-limiting controls in the default configuration. Attackers could exploit this vulnerability to gain unauthorized access by repeatedly attempting...

Users cannot use mintWithSignature() function in most cases

Lines of code Vulnerability details Impact Function sfrxETH.mintWithSignature allows users to approve and mint in one transaction. Users will provide input param shares and function will calculate what assets amount needed to be approved in case approveMax = false. uint256 amount = approveMax ?...

CVE-2022-40671

Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...

CVE-2022-40310

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40671

Cross-Site Request Forgery CSRF vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress...

CVE-2022-40310

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

Race condition

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...

CVE-2022-40310 WordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability

Authenticated subscriber+ Race Condition vulnerability in Rate my Post – WP Rating System plugin = 3.3.4 at WordPress allows attackers to increase/decrease votes...