CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

Design/Logic Flaw

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

Design/Logic Flaw

An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks...

CVE-2020-21238

CVE-2020-21238 affects CSCMS v4.0, with a weakness in the user login box that enables brute-force attacks to hijack user accounts. The issue is documented across multiple sources (NVD entry notes brute-force risk; Red Hat and CNVD mirror the same description). Exploitation status and exact exploi...

CVE-2020-21237

CVE-2020-21237 affects LJCMS v1.11 and is due to a login-box vulnerability that allows brute-force attempts to hijack user accounts. The available documents explicitly describe a lack of effective protection against brute-force login, enabling account hijacking. No concrete patch details, affecte...

CVE-2020-21237

An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks...

CSCMS 安全漏洞

CScms is a content management system CMS developed based on the CI framework. cscms v4.0 is vulnerable due to a lack of effective protection against brute force attacks in the software user login box, which can be exploited by attackers to hijack user accounts via brute force attacks...

Ljcmsshop 安全漏洞

Ljcmsshop is a Php-based online shopping mall system developed by China's Ljcms. Ljcmsshop has a security vulnerability that stems from the lack of effective protection against brute force attacks in the user login box, which can be exploited to hijack a user's account via brute force attack...

in polonel/trudesk

Description When logging in, the login page will tell you whether or not a username exists which is a vulnerability since it can be paired with the lack of rate limitation when logging in in order to help an attacker find out which accounts exist & then brute force those accounts' login...

Acronis: Missing brute force protection on login page on www.acronis.com

A missing brute force protection vulnerability was discovered on the login page of www.acronis.com. This allowed attackers to launch brute force attacks on user accounts, potentially leading to unauthorized access...

CVE-2020-35398

An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted...

CVE-2020-35398

An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted...

CVE-2020-35398

An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted...

CVE-2020-35398

CVE-2020-35398 affects the UTI Mutual fund Android app (versions 5.4.18 and earlier). The issue allows brute-forcing username enumeration via the error message shown after invalid credentials, enabling attackers to identify valid usernames. Documents consistently describe the vulnerability as an ...

Dalmark Systems Systeam Security Vulnerability

Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...

Dalmark Systems Systeam has an unspecified vulnerability

Dalmark Systems Systeam is an Erp system from Dalmark Systems, a Brazilian company. version 2.22.8 build 1724 of Dalmark Systems Systeam contains a security vulnerability that could be exploited by an attacker to brute-force a valid user...

The vulnerability of the microprogrammed Ethernet module software WISE-4060, Adam-6050 D, and Adam.NET Utility lies in their weak password requirements, allowing attackers to compromise user credentials.

The vulnerability of the microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utilit is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise user credentials through brute-force attacks...

CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery...

CVE-2021-44876

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the identification of t...