5811 matches found
2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424
ブルートフォース攻撃による2FAバイパス 概要 Nagios Fusionアプリケーション（バージョン2024R1.2および2024R2）は、二要素認証（2FA）メカニズムに対するブルートフォース攻撃に対して脆弱です。具体的には、2FAの実装はレート制限やアカウントロックアウトのメカニズムを適切に適用しておらず、攻撃者がワンタイムパスワード（OTP）を繰り返し推測することで2FAをバイパスできる可能性があります。 以下の問題が確認されました: レート制限の欠如 : 2FAエンドポイントはOTP送信試行回数を制限しません。 ロックアウトポリシーの不備 :...
CVE-2025-4094
CVE-2025-4094 – WordPress Digits プラグイン この方法は、Burp 内で視覚的に確認し、検出しきい値を微調整するのに役立ちます。 拡張スクリプト POCPioneer による Enhanced PoC 参考情報 WPScan 脆弱性エントリ WPVulnDB エントリ 公式プラグインページ CVE ID – CVE-2025-4094...
CVE-2026-86729
WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...
CVE-2026-86729
WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as an undocumented login path. Unlike get_api_signIn , which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit(), this endpoint performs the same credential c...
EUVD-2026-72865
WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...
CVE-2026-86729 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
WWBN AVideo through commit e01e41ecc no patched version available exposes getapipreauthorize in plugin/API/API.php as a second, undocumented login path. Unlike getapisignIn, which enforces a rate limit of 10 attempts per 5 minutes via checkRateLimit, getapipreauthorize performs the same credentia...
CVE-2026-59827
認可された Metabase CVE-2026-59827 侵入テストツール 承認された侵入テストの一環として、Metabase デプロイメントにおける CVE-2026-59827 の存在を検証するための、認可されたセキュリティ評価ユーティリティです。 このツールは、破壊的または永続的なアクションを試みるのではなく、制御された概念実証デモンストレーションを実行することで、影響を最小限に抑えながら脆弱性の存在を実証するように設計されています。実行されたすべてのアクションはログに記録され、プロフェッショナルなセキュリティ評価に適した監査証跡を提供します。 警告...
kernel: wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This use-after-free vulnerability arises from incorrect handling of fast-RX rate data during mesh processing. This can lead to memory corruption, which an attacker could potentially exploit to cause a system crash denial of service...
CVE-2026-71205-PoC
CVE-2026-71205 — changedetection.io：/login 无速率限制可导致无限密码暴力破解 产品： dgtlmoon/changedetection.io — v0.55.7 文件： changedetectionio/flaskapp.py CWE： CWE-307 — 对过多身份验证尝试的限制不当 CVSS 3.1： AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N — 6.5（中危） CNA： Turan Security · CVE 记录 描述 changedetection.io 的 /login 路由将提交的密码与单个...
CVE-2024-25277
CVE-2024-25277 discovered on MW45APT02.0002 Resources and PoCs このリポジトリは、CVE-2024-25277 の分析と発見中に収集されたスクリプトおよび PoC のコレクションです。 この発見の詳細については、https://blog.maentechie.com/bypass-rate-limiting-in-tcl-mw45ad-to-achieve-privileges-escalation をご覧ください。 Summary of issues found レート制限のバイパス ハードコードされたトークンとキー...
CVE-2026-68138
CVE-2026-68138 — Linux 内核 net/sched qdisc 速率表 UAF 跟踪站点 CVE-2026-68138 补丁状态跟踪器的来源：一个单页站点，记录哪些发行版已为 Linux 内核中 net/sched qdisc 速率表的释放后使用 / 双重释放（use-after-free / double-free）漏洞发布了修复。 事实所在 关于该漏洞的所有信息——CVE ID、受影响版本和已修复版本、上游修复提交、发现与披露致谢，以及当前各发行版的补丁状态——均属于跟踪器页面，而非本 README： 渲染页面：...
EUVD-2026-72536
Improper Protection of Alternate Path vulnerability in ash-project ashauthenticationoauth2server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2serverprotocolroutes/1 in...
CVE-2026-86452
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
EUVD-2026-72398
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
CVE-2026-86452 MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting. The users/forgot password-reset endpoint accepted an attacker-controlled email value without first imposing a reasonable length bound or...
CVE-2026-86186
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing...
CVE-2026-86186
AVideo is a video hosting platform whose API rate-limiting mechanism fails to account for requests carrying a bot User-Agent header . This allows an unauthenticated attacker to bypass all eight protected operations , including login brute-force protection , by simply setting a bot User-Agent stri...
CVE-2026-86186 AVideo API Rate Limit Bypass via Bot User-Agent Header
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight protected operations including login brute-force protection. Attackers can send requests with a bot User-Agent to disable rate limiting and perform unlimited password guessing...