11552 matches found
PT-2025-1188 · Fortinet · Fortimanager +4
Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.4.1 through 7.4.3 FortiAnalyzer versions 7.6.0 through 7.6.1 FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 FortiManager versions 7.4.1 through 7.4.3 FortiManager versions 7.6.0 through 7.6.1 FortiManager Cloud...
CVE-2024-42173
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known...
CVE-2024-42173 HCL MyXalytics is affected by an improper password policy implementation vulnerability
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known...
PT-2025-2623 · Hcl · Hcl Myxalytics
Name of the Vulnerable Software and Affected Versions: HCL MyXalytics affected versions not specified Description: The issue is related to an improper password policy implementation, allowing attackers to guess or brute-force passwords if the username is known due to weak passwords and a lack of...
DRUPAL-CONTRIB-2025-001
This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site. The module did not sufficiently protect against brute force attacks, allowing an attacker to bypass the...
Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001
This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site. The module did not sufficiently protect against brute force attacks, allowing an attacker to bypass the...
Session Fixation
github.com/drakkan/sftpgo is vulnerable to a session Cookie Prediction vulnerability. The vulnerability is due to the predictable generation of session cookies using the xid library, which results in cookies that are unique but not cryptographically secure, allows an attacker to brute force sessi...
ZenML < 0.57.0 Password Reset Brute Force (CVE-2024-4311)
The version of ZenML installed on the remote host is prior to 0.57.0. It is, therefore, affected by an account takeover exposure due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Password' function, allowing them to...
magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
GHSA-GMX7-GR5Q-85W5 magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
CVE-2024-12034 Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP...
CVE-2024-12034 Advanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock
The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP...
CVE-2024-12034
The CVE-2024-12034 entry concerns the Advanced Google reCAPTCHA plugin for WordPress, where an insufficiently random/unsecure key used to generate unblock requests allows unauthenticated attackers to unblock their IP after a lockout. Affected versions include all up to 1.25. The issue has a publi...
WordPress Advanced Google reCAPTCHA plugin <= 1.25 - Brute Force Protection IP Unblock vulnerability
Brute Force Protection IP Unblock vulnerability discovered by Max Boll b0lli in WordPress Plugin Advanced Google reCAPTCHA versions = 1.25...
Brute-force Attack
github.com/mattermost/mattermost-server is vulnerable to Brute-force Attack. The vulnerability is due to improper synchronization when checking and updating failed login attempts, allowing attackers to bypass the "Max failed attempts" restriction by sending multiple login requests simultaneously...
SUSE CVE-2024-7701
Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0...
The software for data protection solutions from Dell RecoverPoint for virtual machines has a vulnerability related to insufficient limits on authentication attempts. This allows attackers to carry out brute-force attacks.
The vulnerability of the Dell RecoverPoint data protection software for virtual machines relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...
The vulnerability of the Ruijie Reyee OS operating system, related to the lack of a password recovery mechanism, allows attackers to bypass existing security restrictions and execute a brute-force attack.
The vulnerability of the Ruijie Reyee OS operating system is related to the lack of a password recovery mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute an attack using brute-force methods...