3181 matches found
CVE-2023-27746
CVE-2023-27746 affects BlackVue DR750-2CH LTE (v.1.012_2022.10.26). The issue is a weak default passphrase that can be cracked via brute force if the WPA2 handshake is intercepted, enabling unauthorized access. Exploitation status is not provided in the documents. Remediation guidance is present ...
CVE-2022-43947
CVE-2022-43947 is an authenticated brute-force vulnerability in Fortinet FortiOS and FortiProxy. Affected: FortiOS 7.2.0–7.2.3 and before 7.0.10; FortiProxy 7.2.0–7.2.2 and before 7.0.8. Root cause: improper restriction of excessive authentication attempts (CWE-307) that enables an attacker with ...
CVE-2022-43947
An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...
Cisco Meraki Local Status Page Configuration Hardening
Cisco Meraki devices implement a Local Status Page LSP feature. This is a web-based interface that is primarily intended to provide administrators with the ability to apply configuration settings that are required for the device to connect to the Cisco Meraki Dashboard, perform local...
Default credentials
Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications...
PT-2023-13490 · Zoho · Zoho Manageengine Adselfservice Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions through 6203 Description: The issue allows for a brute-force attack, leading to a password reset on IDM applications. This is a result of a weakness in the password reset mechanism, which can be...
CVE-2022-36413
Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications...
CVE-2022-36413
Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications...
CVE-2022-36413: Improper Restriction of Excessive Authentication Attempts
Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications...
answer user enumeration vulnerability
answer is an open source knowledge-based community software. A user enumeration vulnerability exists in versions of answer prior to 1.0.6, which stems from brute-force breaking of a valid email account in the login portal, where the time for a valid account is significantly higher than the time f...
Tridium Niagara AX Improper Authentication (CVE-2012-3024)
Tridium Niagara AX Framework through 3.6 uses predictable values for 1 session IDs and 2 keys, which might allow remote attackers to bypass authentication via a brute-force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...
PT-2023-9095 · Avermedia · Avercaster
Name of the Vulnerable Software and Affected Versions: AVerCaster affected versions not specified Description: The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to perform a brute force attack. Recommendations: At the moment, there is no...
CVE-2021-36689
An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this...
Streetside Development Samourai Wallet 安全漏洞
Streetside Development Samourai Wallet is a modern bitcoin wallet from Streetside Development. A security vulnerability exists in the Streetside Development Samourai Wallet version 0.99.96i, which stems from a vulnerability that allows an attacker to view sensitive information and decrypt the dat...
CVE-2021-36689
The vulnerability CVE-2021-36689 affects Streetside Samourai Wallet for Android (version 0.99.96i). It involves com.samourai.wallet.PinEntryActivity.java, where a brute-force attack using a recovered samourai.dat file can allow an attacker to view sensitive information and decrypt data. The PIN l...
CVE-2021-36689
An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this...
CVE-2021-36689: Weak Password Requirements
An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this...
Bypass IP detection lead to perform brute-force attack
Description In login function, by default, the IP address will be blocked when the user tries to login incorrectly more than 3 times but we can bypass this mechanism by abuse X-Forwarded-For header to bypass IP dectection and perform password brute-force. Proof of Concept POST...
K32055534: Brute Force Attack Prevention feature may erroneously stop prevention before an attack is over
Security Advisory Description The Brute Force Attack Prevention feature may stop prevention before the attack is over. This issue occurs when all of the following conditions are met: You configured the BIG-IP ASM system with many virtual servers hundreds that have web application protection with...