CVE-2023-3605

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can ...

CVE-2023-3605 PHPGurukul Online Shopping Portal Registration Page excessive authentication

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can ...

CVE-2023-3605 PHPGurukul Online Shopping Portal Registration Page excessive authentication

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can ...

CVE-2023-3605

PHPGurukul Online Shopping Portal 1.0 is affected in the Registration Page component, where inadequate restriction of excessive authentication attempts allows remote exploitation. The vulnerability arises from insufficient rate-limiting controls on login/registration flows, enabling an attacker t...

CVE-2023-35697

Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials...

CVE-2023-35697

Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials...

CVE-2023-35697

Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4 could allow a remote attacker to brute-force user credentials...

CVE-2023-35697

The CVE-2023-35697 refers to the SICK ICR890-4 track-and-trace device, with the root cause described as improper restriction of excessive authentication attempts, enabling a remote attacker to brute-force credentials. Publicly documented details indicate the vulnerability affects SICK ICR890-4 an...

Anyone can call Well.sol skim method and transfer excessive tokens to its address.

Lines of code Vulnerability details Impact Excessive tokens balance of Well.sol more than returned from getReserves can be transferred by anyone to his account. Proof of Concept After getting hold token's instances from Well.sol contract tokens we can check the balances of Contract of Each token...

Flash loan price manipulation in Well.sol

Lines of code Vulnerability details Impact Line 214 of Well.sol calculates the price of tokens to tokens in the pool based on the balances at a single point in time. Pool balances at a single point in time can be manipulated with flash loans, which can skew the numbers to the extreme. The single...

PT-2023-25280 · Sick · Sick Icr890-4

Name of the Vulnerable Software and Affected Versions: SICK ICR890-4 affected versions not specified Description: The issue is related to improper restriction of excessive authentication attempts, which could allow a remote attacker to brute-force user credentials. Recommendations: At the moment,...

NO ACCESS CONTROL IN THE Well.skim() EXTERNAL FUNCTION

Lines of code Vulnerability details Impact The Well.skim external function is used to transfer the excess tokens held by the Well to recipient. But there is no access control in this function and hence anyone can call this function. Therefore this function allows any arbitory user recieve the...

CVE-2023-33868 PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts

The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication...

PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

GHSA-2GPR-J5VJ-WVH2 Apache Any23 vulnerable to excessive memory usage

Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

Apache Any23 vulnerable to excessive memory usage

Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

CVE-2023-34150 Apache Any23: Possible excessive allocation of resources reading input.

UNSUPPORTED WHEN ASSIGNED Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

CVE-2023-34150

CVE-2023-34150 affects Apache Any23 due to a flaw in TikaEncodingDetector that can cause excessive memory usage, potentially leading to denial of service. The vulnerability is documented across multiple sources (CVE records and related advisories), describing memory overuse as the primary impact....

CVE-2023-34150 Apache Any23: Possible excessive allocation of resources reading input.

UNSUPPORTED WHEN ASSIGNED Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2268)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...