CVE-2025-64310

Affected products: EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products. Issue: unlimited authentication attempts allow brute force to identify an administrative password (CWE-307). Impact: high risk to confidentiality, integrity, and availability as per CVSS vectors in the co...

CVE-2025-63807

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

SEIKO EPSON Web Config and SEIKO EPSON Web Control have security vulnerabilities

SEIKO EPSON Web Config and SEIKO EPSON Web Control are both products of SEIKO EPSON Corporation, Japan.SEIKO EPSON Web Config is a Web configuration page.SEIKO EPSON Web Control is a Web management page. A security vulnerability exists in SEIKO EPSON Web Config and SEIKO EPSON Web Control that...

CVE-2025-64310: Improper Restriction of Excessive Authentication Attempts

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack...

EUVD-2025-198338

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

CVE-2025-63807

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

CVE-2025-63807

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

CVE-2025-62294

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55...

CVE-2025-62294 Predictable Generation of Password Recovery Token

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55...

CVE-2025-62294 Predictable Generation of Password Recovery Token

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55...

CVE-2025-62294: Generation of Predictable Numbers or Identifiers

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55...

Blogile security vulnerabilities

Blogile is a Node.js blogging system. A security vulnerability exists in Blogile, which stems from a weak CAPTCHA generation mechanism and a lack of rate limiting, which could lead to a brute force attack...

PT-2025-47629

Name of the Vulnerable Software and Affected Versions weijiang1994 university-bbs aka Blogin versions prior to commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13 Description The software contains a flaw due to a weak verification code generation mechanism and a lack of rate limiting. This...

CVE-2025-63807: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

CVE-2025-63807

An issue was discovered in weijiang1994 university-bbs aka Blogin in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 2025-01-13. A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without...

CVE-2025-63807

The weijiang1994 university-bbs (also known as Blogin ) software is vulnerable to a brute-force attack due to a weak verification code generation mechanism and a lack of rate limiting . This flaw allows unauthenticated attackers to guess verification codes, potentially leading to account takeover...

PT-2025-47594

Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.55 Description SOPlanning is susceptible to a weakness in its password recovery token generation process. The use of a weak mechanism for generating these tokens allows a malicious actor to potentially brute-forc...

PT-2025-47659

Name of the Vulnerable Software and Affected Versions EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products affected versions not specified Description The software does not limit the number of authentication attempts, potentially allowing an attacker to identify an...

CVE-2025-65014

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password policy vulnerability was identified in the user management functionality of the LibreNMS application. This vulnerability allows administrators to create accounts with extremely...

CVE-2025-51663

A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to perform DoS attacks or brute force share...