Python-Programs 加密问题漏洞

Python-Programs is a collection of Python applications by the individual developer Shashikant Singh. Python-Programs suffers from an encryption issue vulnerability that stems from insufficient encryption strength, which could lead to a brute force cracking attack...

CVE-2025-3709

Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack...

CVE-2024-58135 Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default

Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand...

CVE-2025-4222

CVE-2025-4222 is a WordPress Database Toolset plugin vulnerability affecting all versions up to 1.8.4. The issue is an unauthenticated exposure of sensitive information via publicly accessible database backup files. An index file is present, which means a brute-force attempt would be needed to ac...

PT-2025-18936 · WordPress · Database Toolset

Name of the Vulnerable Software and Affected Versions: Database Toolset plugin for WordPress versions up to, and including, 1.8.4 Description: The issue allows unauthenticated attackers to extract sensitive data from database backup files stored in a publicly accessible location. This is possible...

CVE-2025-3709

Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack...

CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...

CVE-2025-42600

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...

CVE-2025-42600

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...

CVE-2025-42600 Brute Force Attack Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to...

CVE-2025-42600

CVE-2025-42600 affects Meon KYC solutions and is tied to missing restrictions on the number of incorrect OTP attempts in certain login API endpoints. The vulnerability allows brute-forcing OTPs and could enable unauthorized access to other user accounts. Documented details consistently describe t...

PT-2025-17611 · Unknown · Meon Kyc Solutions

Name of the Vulnerable Software and Affected Versions: Meon KYC solutions affected versions not specified Description: The issue is caused by missing restrictions on the number of incorrect One-Time Password OTP attempts through certain API endpoints of the login process. A remote attacker could...

CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...

CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...

CVE-2024-53591

CVE-2024-53591 concerns Seclore v3.27.5.0. The issue is on the login page and allows attackers to bypass authentication via brute-force attempts. Concrete details from connected sources: affected software Seclore version 3.27.5.0; root cause is insecure login handling enabling authentication bypa...

CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack...

Seclore 安全漏洞

Seclore is a secure data sharing software from Seclore, Inc. A security vulnerability exists in Seclore version 3.27.5.0, which stems from the login page being vulnerable to brute force attack...

CVE-2025-3129

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

CVE-2025-3129

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4...

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...