CVE-2026-108580 AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login

AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to guess passwords without throttling. Attackers can enumerate usernames through verifyuser response timing and...

xrdp 'sesman/verify_user.c' remote denial of service vulnerability

xrdp is the open source remote desktop communication protocol. A security vulnerability in xrdp 'sesman/verifyuser.c' allows remote attackers to exploit the vulnerability to submit a special request to crash an application...