Threats tagged 'ghsa-cwhp-rxhr-43pp'

1 threat

Threats tagged 'ghsa-cwhp-rxhr-43pp'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-108580AniWorld Downloader · Improper Restriction of Excessive Authentication Attempts Medium6.9EPSS 0.3%2026-10-10CVE Database V5CVE-2026-108580 AniWorld Downloader versions before 5.3.0 have a vulnerability in the WebUI login handler that allows unauthenticated attackers to perform unlimited authentication attempts without throttling. This flaw enables attackers to enumerate usernames based on response timing and brute-force passwords to potentially take over user accounts. EPSS 0.3%Vulnerability phoenixthrush #ghsa-cwhp-rxhr-43pp	CVE Database V5	2026-10-10

Showing 1–1 of 1 result