Lucene search
+L

69 matches found

Kitploit
Kitploit
added 2026/09/03 2:05 a.m.6 views

CVE-2025-56224

CVE-2025-56224(OTP)验证绕过 描述 攻击者可以冒充其他用户的手机号码,并利用此漏洞在不知道 OTP 验证码的情况下验证该号码。 CVSS 评分:8.1(高危) 攻击类型 远程(已认证) 受影响版本 8.6.8 及之前的版本 产品供应商 Ascertia 受影响产品代码库 SigningHub 受影响组件 手机号码验证功能。 缓解措施 如果尝试次数超过一定值,则撤销 OTP 验证码。 漏洞详情 该应用程序未对一次性密码(OTP)验证端点实施适当的速率限制。这允许攻击者在不受限制的情况下自动化并暴力破解 OTP 验证码。通过快速连续发送大量 OTP...

8.1CVSS5.7AI score0.00363EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 2:04 a.m.7 views

CVE-2025-56219

CVE-2025-56219 Falta de Limitación de Velocidad – API de Añadir Usuario Descripción Un atacante puede automatizar la creación de un gran número de Usuarios en un corto período de tiempo para provocar un DoS. Puntuación CVSS: 7.1 Alta Tipo de Ataque Remoto Autenticado Versiones Afectadas Versiones...

7.1CVSS5.2AI score0.00302EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 2:04 a.m.6 views

CVE-2025-56223

CVE-2025-56223 Denegación de Servicio – API de Carga de Documentos Descripción Un atacante puede cargar rápidamente un gran volumen de archivos para provocar una denegación de servicio. Puntuación CVSS: 7.1 Alta Tipo de Ataque Remoto Autenticado Versiones Afectadas Versiones anteriores a 8.6.8...

7.5CVSS5.6AI score0.00433EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 2:04 a.m.8 views

CVE-2025-56221

CVE-2025-56221 对过多身份验证尝试的限制不当 描述 攻击者可以进行无限制的身份验证尝试,从而增加通过密码猜测来入侵目标用户账户的风险。 CVSS 评分:7.5(高危) 攻击类型 远程(已认证) 受影响版本 版本 8.6.8 发现者: Yazan Abu-Nadi...

9.8CVSS5.2AI score0.00561EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 8:07 a.m.11 views

CVE-2025-56218

CVE-2025-56218 无限制文件上传 描述 攻击者可以上传一个包含恶意脚本或钓鱼 URL 的 Excel 文件。应用程序将该文件转换为 PDF 并转发给预期收件人进行数字签名。由于生成的 PDF 中的超链接以攻击者控制的文本显示,且没有显示任何警告,收件人可能会被欺骗点击该链接,从而触发恶意命令的执行 CVSS 评分:5.5(中危) 攻击类型 远程(已认证) 受影响版本 8.6.8 及之前的版本 产品供应商 Ascertia 受影响产品代码库 SigningHub 受影响组件 文件上传功能。 缓解措施 在将上传的文件发送给目标用户之前对其进行扫描 漏洞详情...

9.8CVSS5.2AI score0.00589EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 7:00 a.m.4 views

CVE-2025-54321

CVE-2025-54321 重置密码邮件轰炸 描述 重置密码功能未对目标电子邮件地址实施速率限制。这可能导致邮件轰炸攻击 CVSS 评分:7.1(高危) 攻击类型 远程(已认证) 受影响版本 版本 8.6.8 发现者 Yazan Abu-Nadi...

9.8CVSS5.2AI score0.00472EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 6:40 a.m.3 views

CVE-2025-54320

CVE-2025-54320 邀请用户邮件轰炸 描述 邀请API未对目标电子邮件地址实施速率限制。这允许进行邮件轰炸攻击。 CVSS评分:7.1(高) 攻击类型 远程(已认证) 受影响版本 版本 8.6.8 发现者: Yazan Abu-Nadi...

4.3CVSS5.2AI score0.00328EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/07 5:13 a.m.10 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/06 6:33 p.m.12 views

EUVD-2025-209233

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits1References3
NVD
NVD
added 2026/04/06 6:16 p.m.16 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS0.00175EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.13 views

PT-2026-30683

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

5.8AI score0.00175EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.16 views

Ascertia SigningHub 安全漏洞

Ascertia SigningHub is an electronic signature software developed by the British company Ascertia. Version 10.0 of Ascertia SigningHub contains a security vulnerability. This vulnerability stems from open redirection, allowing attackers to redirect users to malicious websites through a specially...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/06 12:00 a.m.31 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

0.00175EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/06 12:00 a.m.30 views

CVE-2025-61166

The CVE-2025-61166 entry describes an open redirect in Ascertia SigningHub User v10.0 that lets an attacker redirect authenticated users to a malicious site via a crafted URL. Affected product: Ascertia SigningHub User 10.0 (component: open redirect functionality). Root cause: misimplementation o...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/06 12:00 a.m.5 views

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL...

5.8AI score0.00175EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.20 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS6.8AI score0.00472EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 12:11 a.m.27 views

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

4.3CVSS6.7AI score0.00328EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/18 9:32 p.m.14 views

EUVD-2025-198073

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

6.3AI score0.00472EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/18 9:32 p.m.17 views

EUVD-2025-198072

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests...

6.2AI score0.00328EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/18 7:15 p.m.10 views

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests...

9.8CVSS5.8AI score0.00472EPSS
SaveExploits0References2
Rows per page
Query Builder