org.wildfly.core:wildfly-elytron-integration: Wildfly Elytron Brute Force Attack via CLI

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI...

EUVD-2025-6713

Malicious code in bioql PyPI...

CVE-2025-27449

CVE-2025-27449 affects Endress+Hauser MEAC300-FNADE4, where the authentication mechanism does not sufficiently limit consecutive failed attempts, enabling brute-force scenarios. Documented details indicate a network-remote vulnerability with high impact on confidentiality, integrity, and availabi...

CVE-2025-30235

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled...

Authentication flaw

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...