PT-2025-5409 · Brainstorm Force · Brainstorm Force Starter Templates

Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates versions 4.4.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations:...

CVE-2025-0693

Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account...

CVE-2025-0693

AWS IAM (Identity and Access Management) is affected. The issue arises in the sign-in flow where variable response times could be exploited to enumerate valid usernames in an AWS account. Impact is described as enabling brute-force username discovery; no explicit exploit vectors or mitigations ar...

CVE-2025-0693 Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration

Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account...

PT-2025-4003 · Amazon · Aws Sign-In Iam

Name of the Vulnerable Software and Affected Versions: AWS IAM affected versions not specified Description: The issue is related to variable response times in the AWS Sign-in IAM user login flow, which allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an...

Amazon AWS Identity and Access Management 安全漏洞

Amazon AWS Identity and Access Management Amazon AWS IAM is a web service from Amazon.com, Inc. that is used to securely control access to AWS services. A security vulnerability exists in Amazon AWS Identity and Access Management, which stems from variable response times in the user login process...

Airtel Xstream Fiber WiFi Weak Authentication / Brute Force Vulnerability

Exploit Title: Airtel Xstream Fiber WiFi - Usage of Weak Initial WiFi password Exploit Author: Alok kumar email protected, Cyberpwn Technologies Pvt. Ltd. Vendor Homepage: https://www.airtel.in Product Link: https://www.airtel.in/wifi-plans Tested on: Airtel Xstream Fiber WiFi router with SSID...

Airtel Xstream Fiber WiFi Weak Authentication / Brute Force

Airtel Xstream Fiber WiFi devices use a weak password scheme that can be brute forced and only consists of 5 digits. Exploit Title: Airtel Xstream Fiber WiFi - Usage of Weak Initial WiFi password Date: 22-Jan-2025 Exploit Author: Alok kumar [email protected], Cyberpwn Technologies Pvt. Ltd...

SUSE CVE-2024-13454

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3...

CVE-2024-13454

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3...

CVE-2024-13454

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3...

The vulnerability of Fortinet’s CSFD software products allows a perpetrator to execute arbitrary code or commands.

The vulnerability of Fortinet’s CSFD software products relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands using brute-force attacks...

The vulnerability of Fortinet’s CSFD software products allows a perpetrator to execute arbitrary code or commands.

The vulnerability of Fortinet’s CSFD software products relates to the bypassing of authentication processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands using brute-force attacks...

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker ...

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker ...

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker ...

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker ...

CVE-2024-50563

CVE-2024-50563 involves a weak authentication flaw affecting Fortinet FortiManager Cloud, FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. Version ranges affected include FortiManager/FortiAnalyzer 7.6.0–7.6.1 and 7.4.1–7.4.3, FortiAnalyzer Cloud 7.4.1–7.4.3, and FortiMan...

Fortinet多款产品 安全漏洞

Fortinet FortiManager and others are products of Fortinet, Inc.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiAnalyzer is a centralized network security reporting solution.Fortinet Fortinet FortiAnalyzer Cloud is a cloud-based logging platform based on...

Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2024 - Includes Oracle April 2024 CPU plus CVE-2023-38264

Summary Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2024 - Includes Oracle April 2024 CPU plus CVE-2023-38264 Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could...