2513 matches found
WordPress plugin Real Estate Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Privilege Escalation
github.com/mayswind/ezbookkeeping is vulnerable to Privilege Escalation. The vulnerability is due to Privilege Escalation due to the lack of rate limiting, allowing a remote attacker to repeatedly attempt authentication or privilege elevation without restriction...
SUSE CVE-2024-48872
Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, and 9.5.x = 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restriction and send a big number of login attempts before being...
Malicious code in bprintoor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ca03f86b909883f380bfa18a115d0a840f2195938d5b154f62b69e991865a496 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
MAL-2025-191797 Malicious code in multis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d8dd7fcb7e4ce42262ad3ce89ed580a46e9a2f979c4e2c9db668fb374ae452b8 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
MAL-2025-191705 Malicious code in computestpspeedcompcomp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 559d64721f5c40906b8c1ba33cf19ffb4a4ae4de9837c442be7c54a0ba1b3b6d Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
Easy!Appointments Improper Restriction of Excessive Authentication Attempts
An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file...
ROS-20250212-01
A vulnerability in Nextcloud cloud storage creation and utilization software Server is related to the lack of restrictions on authentication attempts. Exploitation of the vulnerability could allow an attacker acting remotely to implement a brute force attack...
Astra Linux – Vulnerability in xrdp
xrdp is an open-source RDP server. Versions of xrdp prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of maximum login attempts is supposed to be limited by a configuration parameter MaxLoginRetry in /etc/xrdp/sesman.ini. However,...
MGASA-2025-0044 Updated xrdp packages fix security vulnerability
xrdp allows an infinite number of login attempts. CVE-2024-39917...
Updated xrdp packages fix security vulnerability
xrdp allows an infinite number of login attempts. CVE-2024-39917...
Improper Restriction of Excessive Authentication Attempts
Overview sylius/sylius is a platform for PHP, based on Symfony framework. Affected versions of this package are vulnerable to Improper Restriction of Excessive Authentication Attempts due to improper rate limiting mechanism. An attacker can perform repeated login attempts without being restricted...
CVE-2022-43904
IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895...
CVE-2022-3945
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-3993
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
The vulnerability of the Secure Client Authentication (SCA) server, a software solution for voice call authentication and message exchange in BlackBerry SecuSUITE, allows attackers to circumvent security restrictions and execute brute-force attacks.
The vulnerability of the Secure Client Authentication SCA server, a software solution for voice call authentication and message exchange, developed by BlackBerry SecuSUITE, stems from the lack of limits on the number of authentication attempts. Exploiting this vulnerability allows a malicious act...
CVE-2022-2650
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...
CVE-2022-2166
Improper Restriction of Excessive Authentication Attempts in GitHub repository mastodon/mastodon prior to 4.0.0...