Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:26:47 +0000 EUVD-2026-221563 https://cve.radiocsirt.org/vuln/euvd-2026-221563 EUVD-2026-221563 https://cve.radiocsirt.org/vuln/euvd-2026-221563 fkie_cve-2023-25156 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25156 <p>Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a rate-limiting proxy in front of Kiwi TCMS.</p> <p>Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force attacks against the login page. Users should upgrade to v12.0 or later to receive a patch. As a workaround, users may install and configure a rate-limiting proxy in front of Kiwi TCMS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25156 GHSA-7968-h4m4-ghm9 — No protection against brute-force attacks on login page https://cve.radiocsirt.org/vuln/ghsa-7968-h4m4-ghm9 <p><strong>Affected:</strong> PyPI: kiwitcms</p> <p>### Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page.</p> <p>### Patches Users should upgrade to v12.0 or later.</p> <p>### Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx.</p> <p>### References [Disclosed by spyata](https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/)</p> <p><strong>Affected:</strong> PyPI: kiwitcms</p> <p>### Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page.</p> <p>### Patches Users should upgrade to v12.0 or later.</p> <p>### Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx.</p> <p>### References [Disclosed by spyata](https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/)</p> https://cve.radiocsirt.org/vuln/ghsa-7968-h4m4-ghm9 gsd-2023-25156 https://cve.radiocsirt.org/vuln/gsd-2023-25156 gsd-2023-25156 https://cve.radiocsirt.org/vuln/gsd-2023-25156 PYSEC-2026-835 — No protection against brute-force attacks on login page https://cve.radiocsirt.org/vuln/pysec-2026-835 <p><strong>Affected:</strong> PyPI: kiwitcms</p> <p>### Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page.</p> <p>### Patches Users should upgrade to v12.0 or later.</p> <p>### Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx.</p> <p>### References [Disclosed by spyata](https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/)</p> <p><strong>Affected:</strong> PyPI: kiwitcms</p> <p>### Impact Previous versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page.</p> <p>### Patches Users should upgrade to v12.0 or later.</p> <p>### Workarounds Users may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx.</p> <p>### References [Disclosed by spyata](https://huntr.dev/bounties/2b1a9be9-45e9-490b-8de0-26a492e79795/)</p> https://cve.radiocsirt.org/vuln/pysec-2026-835