28669 matches found
PT-2025-42643
Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8 Description A missing rate limit in the login process enables attackers to circumvent authentication through brute-force attempts. The issue affects the login mechanism and could allow unauthorized access...
CVE-2025-56221: Improper Restriction of Excessive Authentication Attempts
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...
CVE-2025-56221
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...
CVE-2025-56221
The SigningHub electronic signature platform, specifically version 8.6.8 and earlier, is vulnerable to a brute-force attack due to a lack of rate limiting in its login mechanism. This flaw affects the Authentication API (/authenticate) , allowing an attacker to make unlimited authentication attem...
CVE-2025-62399
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...
Reduced Password Entropy
typo3/cms-core is vulnerable to reduced password entropy. The vulnerability is due to a deterministic three-character prefix in the Password Generation component, which reduces randomness and allows an attacker to perform brute-force attacks more efficiently...
CVE-2025-56748
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-54499: Observable Timing Discrepancy
Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...
6 Essential AI Cybersecurity Tools for Your Stack
Is your security team spending more time chasing low-level alerts than hunting for genuine threats? It’s a common problem that leads to burnout and allows critical risks to slip through the cracks. The most significant advantage of AI cybersecurity tools is their ability to restore focus. By...
EUVD-2025-34619
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-56748
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-56748: Weak Password Recovery Mechanism for Forgotten Password
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-56748
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-56748
Creativeitem Academy LMS versions up to and including 5.13 are vulnerable to a weak password recovery mechanism. The application uses predictable password reset tokens based on Base64 encoded templates and lacks rate limiting . This flaw allows attackers to perform brute-force attacks to guess va...
Creativeitem Academy LMS security vulnerabilities
Creativeitem Academy LMS is an online learning management system from Creativeitem Bangladesh. A security vulnerability exists in Creativeitem Academy LMS version 5.13 and earlier, which stems from the use of predictable Base64 encoded password reset tokens without rate limiting, which could lead...
CVE-2025-56748
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts...
CVE-2025-58590
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...
CVE-2025-11666
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file forceupgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument currentforceupgradepwd can lead to use of hard-coded password. The attack can only be executed...
Brute-Force Attack
ethycafides is vulnerable to brute-force attack. The vulnerability is due to the absence of specific anti-automation controls on the Admin UI login endpoint, which allows an attacker to perform credential testing attacks such as credential stuffing or password spraying to gain unauthorized access...
