whatsapp-census

¡Hola! Estás usando WhatsApp Este es el repositorio de GitHub para la versión extendida del artículo ¡Hola! Estás usando WhatsApp: Enumerando tres mil millones de cuentas para la seguridad y privacidad. Resumen WhatsApp, con 3.5 mil millones de cuentas activas a principios de 2025, es la platafor...

CVE-2026-100678 stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting

stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who know a password to guess TOTP codes with only IP-based rate limiting. Attackers can reuse MFA challenge tickets across multiple failed attempts and distribute guesses across IP...

CVE-2026-100678 stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting

stoatchat before 0.15.5 fails to enforce account-level attempt limits on MFA login challenges, allowing attackers who know a password to guess TOTP codes with only IP-based rate limiting. Attackers can reuse MFA challenge tickets across multiple failed attempts and distribute guesses across IP...

Eaton Intelligent Power Protector 安全漏洞

Eaton Intelligent Power Protector is a power protection software developed by the American company Eaton. There is a security vulnerability in Eaton Intelligent Power Protector, which stems from insufficient rate-limiting controls. This vulnerability may lead to repeated authentication attempts...

CVE-2026-32295 JetKVM insufficient login rate limiting

JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials...

EUVD-2018-0960

Malware in sbrugna...

EUVD-2017-15834

Malware in sbrugna...

Brute Force Attack

vantage6 is vulnerable to Brute Force Attack. The vulnerability is due to insufficient rate limiting due to the ability to make unlimited password change attempts using an authenticated session, allowing attackers to guess passwords...

Privilege Escalation

github.com/mayswind/ezbookkeeping is vulnerable to Privilege Escalation. The vulnerability is due to Privilege Escalation due to the lack of rate limiting, allowing a remote attacker to repeatedly attempt authentication or privilege elevation without restriction...

CVE-2021-1350: Allocation of Resources Without Limits or Throttling

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted...

PT-2018-8637

Name of the Vulnerable Software and Affected Versions: Cisco Prime Network affected versions not specified Description: A vulnerability in the TCP throttling process could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The issue is due ...

CVE-2018-0094

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv...

CVE-2018-0094: Protection Mechanism Failure

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv...

Cisco UCS Central Software IPv6 Denial of Service Vulnerability

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv...

PT-2017-2029

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions prior to 10.5.2.14900-16 Cisco Unified Communications Manager versions prior to 11.0.1.23900-5 Cisco Unified Communications Manager versions prior to 11.5.1.12900-2 Microsoft Windows affected...

CVE-2017-3808: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...