Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-45395

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.01232EPSS
Exploits0References1
NVD
NVD
added 2025/05/23 4:15 p.m.9 views

CVE-2025-48375

Schule is open-source school management system software. Prior to version 1.0.1, the file forgotpassword.php or equivalent endpoint responsible for email-based OTP generation lacks proper rate limiting controls, allowing attackers to abuse the OTP request functionality. This vulnerability can be...

8.7CVSS0.0042EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/23 12:0 a.m.3 views

PT-2025-22812 · Schule · Schule

Name of the Vulnerable Software and Affected Versions: Schule versions prior to 1.0.1 Description: The issue concerns a lack of proper rate limiting controls in the file forgot password.php, which is responsible for email-based OTP generation. This allows attackers to abuse the OTP request...

8.7CVSS6.5AI score0.0042EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/03/15 12:8 p.m.5 views

CVE-2025-29998

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP...

8.2CVSS7AI score0.00629EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/04 12:12 p.m.18 views

CVE-2024-51557 No Rate Limiting Vulnerability in Wave 2.0

This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted...

7.1CVSS0.01232EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/04 12:12 p.m.12 views

CVE-2024-51557 No Rate Limiting Vulnerability in Wave 2.0

This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted...

7.1CVSS7AI score0.01232EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/04 12:18 p.m.22 views

CVE-2024-47654 No Rate Limiting vulnerability

This vulnerability exists in Shilpi Client Dashboard due to lack of rate limiting and Captcha protection for OTP requests in certain API endpoint. An unauthenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints, which could lead...

7.1CVSS0.0062EPSS
Exploits0References1
Rows per page
Query Builder