Most recent entries from all

bdu:2023-06374

EUVD-2026-198078

fkie_cve-2023-34429

Weintek Weincloud v0.13.6

could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.

GHSA-wf6p-c35g-p4cw

Weintek Weincloud v0.13.6

could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.

gsd-2023-34429

ICSA-23-199-04 — Weintek Weincloud

The affected product could allow an attacker to reset a password with the corresponding account's JWT token only. The affected product could allow an attacker to abuse the registration functionality to login with testing credentials to the official website. The affected product could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error message responses. The affected product could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.