CVE-2025-31676

Drupal Email TFA (Drupal Email TFA module) is affected by a weak authentication vulnerability that enables brute-force attempts against the email-based second factor. The issue affects versions 0.0.0 through 2.0.2 and can allow bypass of the second factor, with exploitation described as a brute-f...

CVE-2025-31676 Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

CVE-2025-31676 Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3...

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

CVE-2025-25211

Weak password requirements issue exists in CHOCO TEI WATCHER mini IB-MCT001 all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login...

CVE-2025-25211

CVE-2025-25211 affects CHOCO TEI WATCHER mini (IB-MCT001) all versions. Root cause: weak password requirements that may permit brute-force login to obtain unauthorized access. CVSS metrics indicate high impact (Confidentiality, Integrity, Availability) with network attack vector and no user inter...

Drupal Email TFA 安全漏洞

Drupal Email TFA is a Drupal community module that provides email-based two-factor authentication functionality for Drupal. A security vulnerability exists in Drupal Email TFA versions prior to 2.0.3, which stems from weak authentication and could lead to brute force exploits...

PT-2025-13840 · Drupal · Drupal Email Tfa

Name of the Vulnerable Software and Affected Versions: Drupal Email TFA versions 0.0.0 through 2.0.2 Description: The issue is related to weak authentication in Drupal Email TFA, allowing brute force attacks. Recommendations: For versions 0.0.0 through 2.0.2, update to version 2.0.3 or later to...

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

pfSense Login Scanner

This module performs login attempts against a Netgate pfSense router webpage to bruteforce possible credentials. Module Options msf use auxiliary/scanner/http/pfsenselogin msf auxiliarypfsenselogin show actions ...actions... msf auxiliarypfsenselogin set ACTION msf auxiliarypfsenselogin show...

CVE-2025-2911

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

CVE-2025-2911 Improper Restriction of Excessive Authentication Attempts vulnerability in MeetMe products

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

CVE-2025-2911

The CVE-2025-2911 entry pertains to MeetMe products with versions prior to 2024-09, where an unauthorized access path exists to the Call Forwarding Service. The underlying issue allows an attacker to identify multiple users and perform brute-force attempts via extensions. Publicly available refer...

CVE-2025-2911 Improper Restriction of Excessive Authentication Attempts vulnerability in MeetMe products

Unauthorised access to the call forwarding service system in MeetMe products in versions prior to 2024-09 allows an attacker to identify multiple users and perform brute force attacks via extensions...

MeetMe 安全漏洞

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09 that stems from unauthorized access to the Call Forwarding Service system, which could be brute force attacked via an extension number...

PT-2025-27475 · Unknown · Filebrowser

Name of the Vulnerable Software and Affected Versions: File Browser versions prior to 2.34.1 Description: The issue concerns a missing password policy and brute-force protection in the authentication process, making it insecure. Attackers could potentially mount a brute-force attack to retrieve t...

Multiple vulnerabilities in CHOCO TEI WATCHER mini

Overview CHOCO TEI WATCHER mini provided by Inaba Denki Sangyo Co., Ltd. contains multiple vulnerabilities listed below. Use of client-side authentication CWE-603 - CVE-2025-24517 Storing passwords in a recoverable format CWE-257 - CVE-2025-24852 Weak password requirements CWE-521 - CVE-2025-2521...

Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues

Summary Multiple Security Vulnerabilities in the IBM Security Directory Suite have been addressed by code updates and updating the relevant components. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...

CVE-2023-42818

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...