65 matches found
CVE-2025-54321
CVE-2025-54321 E-Mail-Bombing per Passwort-Reset Beschreibung Die Funktion zum Zurücksetzen des Passworts implementiert kein Rate Limiting für die Ziel-E-Mail-Adresse. Dies ermöglicht einen E-Mail-Bombing-Angriff. CVSS-Score: 7.1 Hoch Angriffstyp Remote authentifiziert Betroffene Versionen...
SocialEngineering
SOCIAL ENGINEER 🎯🕵️♂️ Um poderoso kit de engenharia social que automatiza phishing, bombardeio de OTP/e-mail, e-mails falsos e muito mais — feito com ❤️ por @karthithehacker ⚠️ Apenas para uso educacional. Não use esta ferramenta contra ninguém sem permissão explícita. 📌 Recursos 🎯 Ataques de...
CVE-2025-54320
CVE-2025-54320 Email-бомбинг приглашения пользователя Описание API приглашений не реализует ограничение частоты запросов rate limiting для целевого адреса электронной почты. Это позволяет проводить атаку Email Bombing. CVSS Score: 7.1 Высокий Тип атаки Удалённая с аутентификацией Затронутые верси...
CVE-2026-31283
CVE-2026-31283 Descrição O recurso "Forgot password" pode ser usado para lançar um ataque de bombardeio de e-mail contra o e-mail da vítima. Pontuação CVSS 3: 7.5 Alta Tipo de ataque Remoto Não autenticado Versões afetadas Versões anteriores a 19.1.5 Descoberto por: Yazan Abu-Nadi...
EmBomber
EmBomber Script Python per Email Bombing che supporta Gmail, Yahoo, Hotmail/Outlook Fatto con da Mazen Elzanaty Caratteristiche Supporta Gmail Supporta Yahoo Supporta Hotmail/Outlook Utilizzo EmBomber dovrebbe funzionare su tutte le distribuzioni Linux con Python 2.7 Per prima cosa, clonalo...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
EUVD-2026-21931
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
Totara LMS 安全漏洞
Totara LMS is an learning management system provided by the Totara company. Versions of Totara LMS prior to v19.1.5 contained security vulnerabilities. These vulnerabilities stemmed from the forget password API not implementing rate limits on target email addresses, which could lead to email...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
PT-2026-32360
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack...
CVE-2026-31283
CVE-2026-31283 impacts Totara LMS v19.1.5 and earlier, where the forgot password API lacks rate limiting for target email addresses. This underpins a potential Email Bombing attack; the root cause is insufficient request throttling in the forgot password flow. Public details confirm affected prod...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
CVE-2025-54321
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...
CVE-2025-54320
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...
EUVD-2025-198073
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...
EUVD-2025-198072
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...
CVE-2025-54321
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...
CVE-2025-54321
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...