Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application allows Brute Force. This issu...

CVE-2026-1816

Improper restriction of excessive authentication attempts vulnerability in Turkiye Electricity Transmission Corporation

历史摘要 · 未重新核验 · NVD

phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration

### Summary An authentication bypass vulnerability in phpMyFAQ allows any unauthenticated attacker to reset the password

历史摘要 · 未重新核验 · GitHub Advisory

In BYD Atto3, an attacker can obtain an authentication key through Brute Force attack, which is permanently available. The authentication key enables flash to the Electronic Par...

CVE-2025-61081

In BYD Atto3, an attacker can obtain an authentication key through Brute Force attack, which is permanently available. T

历史摘要 · 未重新核验 · NVD

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that...

CVE-2020-37228

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass

历史摘要 · 未重新核验 · GitHub Advisory

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode obje...

CVE-2020-37228

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass

历史摘要 · 未重新核验 · NVD

phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts...

CVE-2026-45010

phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/

历史摘要 · 未重新核验 · GitHub Advisory

phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameter...

CVE-2026-45010

phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/

历史摘要 · 未重新核验 · NVD

Better Auth: Rate limiter keys IPv6 addresses individually and is bypassable via prefix rotation

CVE-2026-45364

### Am I affected? Users are affected if all of the following are true: - Their app uses `better-auth` at a version `<

历史摘要 · 未重新核验 · GitHub Advisory

Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middleware in the users-permissions plugin derived its rate-limit...

CVE-2025-64526

Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middlewa

历史摘要 · 未重新核验 · NVD

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially le...

CVE-2025-62313

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This m

历史摘要 · 未重新核验 · NVD

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset...

CVE-2026-44195

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler

历史摘要 · 未重新核验 · NVD

Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying

CVE-2025-64526

### Summary of CVE-2025-64526 Vulnerability Details - CVE: CVE-2025-64526 - CVSS v3.1 Vector: `CVSS:4.0/AV:N/AC:L/AT:N/

历史摘要 · 未重新核验 · GitHub Advisory

** UNSUPPORTED WHEN ASSIGNED ** An improper restriction of excessive authentication attempts vulnerability in the web management interface of Zyxel WRE6505 v2 firmware version V...

CVE-2026-7255

CVE-2026-7255 是 Zyxel WRE6505 v2 无线中继器 web 管理接口中存在的认证尝试次数限制不当漏洞。该漏洞源于固件版本 V1.00(ABDV.3)C0 的 web 管理登录模块缺少对失败登录尝试的速率限制或锁定机

历史摘要 · 未重新核验 · NVD

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing the login brute-force prote...

CVE-2026-43914

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaul

历史摘要 · 未重新核验 · NVD

Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS only inside its custom /authenticate/login view. Flask-Sec...

CVE-2026-7820

Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4. pgAdmin enforces MAX_LOGIN_ATTEMPTS o

历史摘要 · 未重新核验 · NVD

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.25.0, the HTTP login endpoints (POST /login and POST /signalk/v1/auth/login) are...

CVE-2026-41893

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.25.0, the HTTP login en

历史摘要 · 未重新核验 · NVD

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900, Hitachi V...

CVE-2025-2514

Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150,

历史摘要 · 未重新核验 · NVD

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login...

CVE-2023-54347

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protect

来源摘录 · NVD

Signal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)

CVE-2026-41893

## Summary The HTTP login endpoints (`POST /login` and `POST /signalk/v1/auth/login`) are protected by `express-rate-li

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The...

CVE-2026-7671

A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unk

历史摘要 · 未重新核验 · GitHub Advisory