Malicious code in castor-sagitta-rollup-rate-limiter (npm)

The package castor-sagitta-rollup-rate-limiter was found to contain malicious code...

Malicious code in now-rate-limit (npm)

The package now-rate-limit was found to contain malicious code...

Malicious code in brane-pegasus-corvus-rate-limiter (npm)

The package brane-pegasus-corvus-rate-limiter was found to contain malicious code...

MAL-2025-19487 Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)

The package element-ui-rate-limiter-archaeogenetics-prosthetics was found to contain malicious code...

MAL-2025-25539 Malicious code in loglevel-rate-limiter-perseus-playwright (npm)

The package loglevel-rate-limiter-perseus-playwright was found to contain malicious code...

MAL-2025-23010 Malicious code in ignite-stop-superflare-rate-limiter (npm)

The package ignite-stop-superflare-rate-limiter was found to contain malicious code...

MAL-2025-31703 Malicious code in rate-limiter-joviology-apex-dotenv-safe (npm)

The package rate-limiter-joviology-apex-dotenv-safe was found to contain malicious code...

MAL-2025-17889 Malicious code in cygnus-rocket-rate-limiter-library (npm)

The package cygnus-rocket-rate-limiter-library was found to contain malicious code...

MAL-2025-38678 Malicious code in vuepress-alphard-rate-limiter-spectron-webdriver (npm)

The package vuepress-alphard-rate-limiter-spectron-webdriver was found to contain malicious code...

CVE-2025-8927

A vulnerability was determined in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality of the file /email/sendcode of the component Verification Code Handler. The manipulation of the argument email leads to improper restriction of excessive authentication attempts. The...

Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

GHSA-VQ9X-W82R-RHMC Soosyze CMS's /user/login endpoint missing rate-limiting and lockout mechanisms

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

Brute Force

Overview soosyze/soosyze is a Soosyze CMS is a minimalist content management system in PHP, without database to create and manage your website easily. Affected versions of this package are vulnerable to Brute Force via the user/login endpoint due to the absence of rate-limiting and lockout...

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

CVE-2025-52392

CVE-2025-52392 affects Soosyze CMS 2.0. The root cause is missing rate-limiting and account lockout on the /user/login endpoint, enabling brute-force login attempts and potentially unauthorized administrative access. Public sources in connected documents describe a brute-force tool and PoC usage,...

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to...

soosyze 安全漏洞

soosyze is Soosyze open source a content management system . soosyze has a brute force vulnerability , the vulnerability stems from the /user/login endpoint lack of rate limiting and locking mechanism , an attacker can use this vulnerability to cause brute force attack...

PT-2025-32993

Name of the Vulnerable Software and Affected Versions: Soosyze CMS version 2.0 Description: Soosyze CMS version 2.0 is susceptible to brute-force login attacks via the /user/login endpoint. The absence of rate-limiting and lockout mechanisms allows attackers to repeatedly submit login attempts,...