11601 matches found
Citrix MetaFrame ICA Published Applications Bruteforcer
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Citrix MetaFrame ICA Published Applications Bruteforcer', 'Description' = %q This module attempts to brute force program names within the Citrix...
NetIQ Advanced Authentication Brute Force Vulnerability
NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A brute force vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which stems from not...
CVE-2021-22530
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...
CVE-2021-22530
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...
CVE-2021-22530
CVE-2021-22530 affects NetIQ Advance Authentication and describes a brute-force risk on the API login that does not enforce account lockout. Affected are versions prior to 6.3.5.1. Potential impact includes user account compromise and possible server performance degradation. Remediation per the c...
CVE-2021-22530 Improper account management vulnerability in NetIQ Advance Authentication
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...
CVE-2021-22530 Improper account management vulnerability in NetIQ Advance Authentication
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force attack is performed on API based login. This issue may lead to user account compromise if successful or may impact server performance. This issue impacts all NetIQ Advance Authenticati...
NetIQ Advanced Authentication 安全漏洞
NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A brute force vulnerability exists in NetIQ Advanced Authentication versions prior to 6.3.5.1, which stems from not...
The vulnerability of the centralized system for managing user identities in FreeIPA lies in the insufficient calculation of password hashes. This allows attackers to increase their privileges.
The vulnerability of the centralized system for managing user identities in FreeIPA is related to insufficient calculation of password hashes. Exploiting this vulnerability allows a malicious actor to increase their privileges by testing a large number of possible user passwords...
PT-2024-10884 · Netiq · Netiq Advance Authentication
Name of the Vulnerable Software and Affected Versions: NetIQ Advance Authentication versions prior to 6.3.5.1 Description: A vulnerability identified in NetIQ Advance Authentication does not enforce account lockout when a brute force attack is performed on API-based login. This issue may lead to...
Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000...
Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 Thi...
New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining
Cybersecurity researchers have unpacked a new malware strain dubbed PGMEM that's designed to mine cryptocurrency after brute-forcing their way into PostgreSQL database instances. "Brute-force attacks on Postgres involve repeatedly attempting to guess the database credentials until access is gaine...
PT-2024-7392
Name of the Vulnerable Software and Affected Versions: Webmin Usermin version 2.100 Description: A discrepancy in error messages for invalid login attempts in Webmin Usermin allows attackers to enumerate valid user accounts. This issue is related to shortcomings in the error reporting mechanism,...
PT-2024-41073 · Ооо 'Нпо Мир' · Контроллер Мир Кт-51 +4
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to weak password requirements, which can be exploited by a remote attacker to perform a brute force attack. Recommendations: At the moment, there is no information about...
PT-2024-41077 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the use of cryptographic algorithms containing defects. An attacker can exploit this to perform a brute force attack remotely. Recommendations: At the moment, there i...
CVE-2024-43042
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack...
PT-2024-30268 · Pluck Cms · Pluck Cms
Name of the Vulnerable Software and Affected Versions: Pluck CMS version 4.7.18 Description: The issue allows attackers to execute a brute force attack due to the lack of restriction on failed login attempts. Recommendations: For Pluck CMS version 4.7.18, consider implementing a custom restrictio...
CVE-2024-43042
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack...
Pluck 安全漏洞
Pluck is a small and simple content management system written in PHP by Pluck CMS Open Source. A security vulnerability exists in Pluck version 4.7.18 that stems from not limiting failed login attempts, allowing an attacker to perform a brute force attack...