CVE-2020-35590

Информация об эксплойте Название эксплойта: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - Обход ограничения входа CVE: CVE-2020-35590 Дата: 2020-06-09 Автор эксплойта: N4nj0 Ссылка на ПО: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Версия: 2.13.0 Протестировано на:...

CVE-2025-54321

CVE-2025-54321 E-Mail-Bombing per Passwort-Reset Beschreibung Die Funktion zum Zurücksetzen des Passworts implementiert kein Rate Limiting für die Ziel-E-Mail-Adresse. Dies ermöglicht einen E-Mail-Bombing-Angriff. CVSS-Score: 7.1 Hoch Angriffstyp Remote authentifiziert Betroffene Versionen...

limitrr-php

PHP में Redis का उपयोग करके हल्की दर सीमित करना। Limitrr PHP मेरी दूसरी लाइब्रेरी, Limitrr से बहुत अधिक प्रेरित है, जिसे NodeJS के लिए बनाया गया था। इसे यहाँ देखें। Limitrr PHP उपयोगकर्ताओं को अपने एप्लिकेशन में आसानी से दर सीमा रेट लिमिटिंग एकीकृत करने की अनुमति देता है। अन्य समान पैकेजों के...

CVE-2024-57610

Sylius v2.0.2 में दर सीमा का अभाव विक्रेता होमपेज: https://sylius.com/ पुनरुत्पादन के चरण 1. https://store.sylius.com/login पर जाएँ 2. स्वचालित उपकरणों या स्क्रिप्ट जैसे, Burp Suite, cURL का उपयोग करके कई लॉगिन अनुरोधों का प्रयास करें। 3. ध्यान दें कि कोई दर सीमा लागू नहीं है, और अनुरोध बिना किसी...

CVE-2025-4094

CVE-2025-4094 – वर्डप्रेस डिजिट्स प्लगइन यह विधि Burp के भीतर दृश्य नि...

cve-2019-17240

Bludit = 3.9.22 - تجاوز تخفيف القوة العمياء هذا مشروع صغير قمت فيه بإعادة كتابة هذا السكربت بلغة بايثون إلى لغة غو. كان الغرض من هذا المشروع هو تعلّم لغة غو وفهم كيفية عمل هذا الاستغلال. الاستخدام root@kitploit: $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of ./brutepass: -c...

CVE-2026-31283

CVE-2026-31283 Descrição O recurso "Forgot password" pode ser usado para lançar um ataque de bombardeio de e-mail contra o e-mail da vítima. Pontuação CVSS 3: 7.5 Alta Tipo de ataque Remoto Não autenticado Versões afetadas Versões anteriores a 19.1.5 Descoberto por: Yazan Abu-Nadi...

2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424

Bypass della 2FA tramite attacco di forza bruta Panoramica L'applicazione Nagios Fusion versioni 2024R1.2 e 2024R2 è vulnerabile a un attacco di forza bruta sul meccanismo di autenticazione a due fattori 2FA. In particolare, l'implementazione della 2FA non applica adeguatamente meccanismi di...

whatsapp-census

Hey! Du nutzt WhatsApp Dies ist das GitHub-Repository für die erweiterte Version des Papers Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Zusammenfassung WhatsApp ist mit 3,5 Milliarden aktiven Konten Stand Anfang 2025 die größte...

filtron

Filtron Proxy HTTP inverso per filtrare le richieste tramite diverse regole. Può essere utilizzato tra il webserver di produzione e il server applicativo per prevenire abusi del backend dell'applicazione. Lo scopo originale di questo programma era difendere searx, ma può essere usato per protegge...

CVE-2025-65427

CVE-2025-65427: Authentifizierungs-Rate-Limiting-Problem im Dbit N300 T1 Pro CVE-ID: CVE-2025-65427 Datum: 2025-12-16 Entdecker: Kirubel Produkt: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Firmware-Version: V1.0.0 Beschreibung Ein Problem wurde im Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi...

CVE-2026-81033

Automatisch (through v0.15.0 ) exposes a user enumeration vulnerability through its forgot-password endpoint. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js returns a not-found status for unregistered addresses but a no-content status for registered on...

radar

Radar Radar è uno scanner di rete piccolo ma efficiente scritto in Rust, fortemente ispirato a masscan. Queste sono le caratteristiche principali: Implementazioni in userspace di TCP, UDP, DHCP e ARP, grazie a pnet Asincrono Scansione randomizzata di IP/porte senza pre-allocazione/shuffling...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

grill

grill grill, noto anche come limitazione globale della velocità in Linux, è uno scanner per CVE-2016-5696 pure TCP off-path. Installazione root@kitploit: $ go get github.com/nogoegst/grill Avvertenze Non utilizzare mai collegamenti wireless nel percorso verso gli host. La perdita costante di...

CVE-2026-62862

Typebot (open-source chatbot builder), self-hosted versions ≤ 3.17.1 , is vulnerable to account takeover via brute-forcing of the passwordless email magic-link login code. The root cause is a 6-digit code generated with Math.random() (only 900,000 combinations) with a 10-minute expiry, no attempt...

CVE-2026-62862 TypeBot: Account takeover via brute-forceable 6-digit magic-link code

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code brute forcing that leads to account takeover. The email provider overrides NextAuth's default cryptographically secur...

CVE-2026-79661

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...

EUVD-2026-65453

Ech0 through 4.5.6 registers the PUT /api/echo/like/:id endpoint on the public router group without authentication or rate limiting. Unauthenticated attackers can increment the favcount counter of any echo including private echoes by supplying its UUID, which can be harvested from the public GET...

CVE-2026-79661

Ech0 (through 4.5.6) exposes the PUT /api/echo/like/:id endpoint on its public router group with no authentication and no rate limiting . An unauthenticated attacker can increment the fav_count counter of any echo—including private ones—by supplying its UUID, which is harvestable from the public ...