Improper Authentication

github.com/usememos/memos is vulnerable to improper authentication. Improper restriction of excessive authentication attempts allows an attacker to delete posts on the user's behalf...

GHSA-QRRF-XVCF-P64Q usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts

In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force...

usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts

In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force...

CVE-2022-4797

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in versions of memos prior to 0.9.1 that stems from an improper restriction on excessive authentication attempts...

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4797

CVE-2022-4797 affects usememos/memos prior to v0.9.1. The root cause is improper restriction of excessive authentication attempts, enabling brute-force access to post deletion by guessing post IDs. Consequences include potential deletion of other users’ posts (high impact per linked advisories). ...

PT-2022-28098 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns an improper restriction of excessive authentication attempts. An attacker can exploit this by deleting other users' posts via post id through brute force. Recommendations:...

The Guardian hit by "ransomware attack"

On Tuesday December 20, 2022 British newspaper The Guardian experienced a major IT security incident that crippled a part of its IT infrastructure. The suspected cause is ransomware. In an online article the newspaper published an internal statement from the chief executive and the editor-in-chie...

Spikes in Attacks Serve as a Reminder to Update Plugins

The Wordfence Threat Intelligence team continually monitors trends in the attack data we collect. Occasionally an unusual trend will arise from this data, and we have spotted one such trend standing out over the Thanksgiving holiday in the U.S. and the first weekend in December. Attack attempts...

CVE-2022-30305

An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...

CVE-2022-30305

An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...

Design/Logic Flaw

An insufficient logging CWE-778 vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptor versions 4.2.0, 4.1.0 through 4.1.1, 4.0.0 through 4.0.2, 3.3.0 through 3.3.3, 3.2.0 through 3.2.2,3.1.0 through 3.1.1 and 3.0.0 through 3.0.2 may allow a...

PT-2022-20057 · Fortinet · Fortisandbox +1

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 3.1.0 through 4.0.2 FortiSandbox versions 3.2.0 through 3.2.3 FortiDeceptor versions 3.0.0 through 4.2.0 Description: An insufficient logging issue may allow a remote attacker to repeatedly enter incorrect credentials...

No Protection against Bruteforce attacks on Login page

Description Webpage manager does not limit unsuccessful login attempts allowing Brute Forcing. Proof of Concept 1. Register the account. 2. Logout the account and try to login with the different password. 3. Take the request into Burp suite intruder, set the payload list to 30for testing. 4. The...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

CVE-2022-2650 Improper Restriction of Excessive Authentication Attempts in wger-project/wger

Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...

Input validation

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...

CVE-2022-37772

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...

PT-2022-24062 · Maarch Rm · Maarch Rm

Name of the Vulnerable Software and Affected Versions: Maarch RM version 2.8.3 Description: The issue is related to an improper restriction of excessive authentication attempts due to excessive verbose responses from the application. This could allow an unauthenticated remote attacker to...