https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:03:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-253858 EUVD-2026-253858 https://cve.radiocsirt.org/vuln/euvd-2026-253858 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8118 <p>PAD CMS implements weak client-side brute-force protection by utilizing two cookies:  login_count and login_timeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue affects all 3 templates: www, bip and www+bip.</p> <p>This product is End-Of-Life and producent will not publish patches for this vulnerability.</p> <p>PAD CMS implements weak client-side brute-force protection by utilizing two cookies:  login_count and login_timeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue affects all 3 templates: www, bip and www+bip.</p> <p>This product is End-Of-Life and producent will not publish patches for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8118 https://cve.radiocsirt.org/vuln/ghsa-xphg-w288-5vjw <p>PAD CMS implements weak client-side brute-force protection by utilizing two cookies:  login_count and login_timeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue affects all 3 templates: www, bip and www+bip.</p> <p>This product is End-Of-Life and producent will not publish patches for this vulnerability.</p> <p>PAD CMS implements weak client-side brute-force protection by utilizing two cookies:  login_count and login_timeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue affects all 3 templates: www, bip and www+bip.</p> <p>This product is End-Of-Life and producent will not publish patches for this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-xphg-w288-5vjw