Lucene search
K

62 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 5:13 a.m.0 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.0004EPSS
Exploits1References1
EUVD
EUVD
added 2026/04/06 6:33 p.m.3 views

EUVD-2025-209233

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.0004EPSS
Exploits1References3
NVD
NVD
added 2026/04/06 6:16 p.m.1 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS0.0004EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.0 views

PT-2026-30683

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

5.8AI score0.0004EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/04/06 12:0 a.m.1 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

5.8AI score0.0004EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.3 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software developed by the British company Ascertia. Version 10.0 of Ascertia SigningHub contains a security vulnerability. This vulnerability stems from open redirection, allowing attackers to redirect users to malicious websites through a specially...

6.1CVSS5.8AI score0.0004EPSS
Exploits1References2
CVE
CVE
added 2026/04/06 12:0 a.m.5 views

CVE-2025-61166

The vulnerability is an open redirect in Ascertia SigningHub User v10.0 . A crafted URL can redirect users to a malicious site. The connected sources confirm the issue but do not provide exploitation details, affected versions beyond v10.0, or remediation steps. No root-cause specifics are disclo...

6.1CVSS5.8AI score0.0004EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/04/06 12:0 a.m.16 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

0.0004EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.6 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS6.8AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.5 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS6.7AI score0.00063EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 9:32 p.m.2 views

EUVD-2025-198073

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

6.3AI score0.00027EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/18 9:32 p.m.3 views

EUVD-2025-198072

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

6.2AI score0.00063EPSS
Exploits0References3
OSV
OSV
added 2025/11/18 7:15 p.m.1 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS5.8AI score0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/11/18 7:15 p.m.1 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS0.00027EPSS
Exploits0References2
NVD
NVD
added 2025/11/18 7:15 p.m.3 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS0.00063EPSS
Exploits0References2
OSV
OSV
added 2025/11/18 7:15 p.m.1 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS5.8AI score0.00063EPSS
Exploits0References2
CVE
CVE
added 2025/11/18 12:0 a.m.8 views

CVE-2025-54320

In Ascertia SigningHub up to version 8.6.8, the Invite Users function lacks rate limiting, enabling an authenticated attacker to automate invites and trigger an email bombing scenario. Affected software: Ascertia SigningHub (versions through 8.6.8). Underlying issue: insufficient throttling on th...

4.3CVSS6.3AI score0.00063EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/18 12:0 a.m.4 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

6.3AI score0.00063EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.4 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software from Ascertia UK. A security vulnerability exists in Ascertia SigningHub version 8.6.8 and prior versions, which stems from a lack of rate limiting in the Invite Users feature and could lead to email bombing...

4.3CVSS6.6AI score0.00063EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.1 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software from Ascertia UK. A security vulnerability exists in Ascertia SigningHub version 8.6.8 and prior versions, which stems from a lack of rate limiting in the reset password function and could lead to email bombing...

9.8CVSS6.7AI score0.00027EPSS
Exploits0References3
Rows per page
Query Builder