https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 02:29:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-12300 EUVD-2026-12300 https://cve.radiocsirt.org/vuln/euvd-2026-12300 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2368 <p>Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.</p> <p>Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2368 https://cve.radiocsirt.org/vuln/ghsa-9wqr-9787-p4rf <p><strong>Affected:</strong> Packagist: microweber/microweber</p> <p>In the login API, an IP address will by default be blocked when the user tries to login incorrectly more than 5 times. However, a bypass to this mechanism is possible by abusing a X-Forwarded-For header to bypass IP detection and perform a password brute-force. A patch for this issue is available in Microweber version 1.2.21.</p> <p><strong>Affected:</strong> Packagist: microweber/microweber</p> <p>In the login API, an IP address will by default be blocked when the user tries to login incorrectly more than 5 times. However, a bypass to this mechanism is possible by abusing a X-Forwarded-For header to bypass IP detection and perform a password brute-force. A patch for this issue is available in Microweber version 1.2.21.</p> https://cve.radiocsirt.org/vuln/ghsa-9wqr-9787-p4rf https://cve.radiocsirt.org/vuln/gsd-2022-2368 gsd-2022-2368 https://cve.radiocsirt.org/vuln/gsd-2022-2368