6 matches found
VulnCheck KEV: CVE-2025-56132
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...
CVE-2025-66482: Improper Restriction of Excessive Authentication Attempts
Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a reverse proxy at all can bypass IP rate limiting by adding a forged X-Forwarded-For header. Starting with version 2025.9.1, an option trustProxy has been added in config file to...
CVE-2025-56132
The LiquidFiles filetransfer server (versions prior to 4.2 ) is vulnerable to a user enumeration issue within its password reset functionality. An unauthenticated attacker can identify valid user accounts by observing distinguishable responses for valid and invalid email addresses submitted via t...
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Summary The Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to conduct credential testing attacks, such as credential stuffing or...
CVE-2022-20622
A vulnerability in IP ingress packet processing of the Cisco Embedded Wireless Controller with Catalyst Access Points Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device may experience a...
