4009 matches found
CVE-2025-11243
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM before v1.6 allows Excessive Allocation via network...
CVE-2025-11243 Allocation of Resources Without Limits or Throttling in Shelly Pro 4PM
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM before v1.6 allows Excessive Allocation via network...
PT-2025-47440
Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM before v1.6 allows Excessive Allocation via network...
GO-2025-4104 KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt
KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes in github.com/kubevirt/kubevirt. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
MAL-2025-184857 Malicious code in poliaz-alai-yulabaivuku (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1f5a742ccc98a25f09da015a518151cf6cf0b56427ca06497714b8ab4c0b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-131907
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...
CVE-2025-11566
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...
CVE-2025-11566
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint...
PT-2025-46658
Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An issue exists that allows an attacker on the local network to gain access to a user account by performing an arbitrary number of authentication attempts with different...
EUVD-2025-105442
Malicious code in excessivetarantulaz3n npm...
EUVD-2025-84351
Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This iss...
MAL-2025-113761 Malicious code in excessive_reptile_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabda860a15b3a1e49b22a3a6260ab8cb8df74332f5b0a6e36717e45cd518fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74678
Malicious code in excessivecatpurple-22 npm...
EUVD-2025-76929
Malicious code in excessivechimpanzee-notthedevs npm...
EUVD-2025-76930
Malicious code in excessivebedbug-smiletea npm...
EUVD-2025-79296
Malicious code in excessiveseahorsez3n npm...
EUVD-2025-81997
Malicious code in excessivejunglefowl0xrequest npm...
Malicious code in excessive_elephant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f5e2504c56298ba238d9608e9747ee0fd5327fb9a9029444e00823c1ac8fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...