Skip to content
OpenAdvisories

Vendor

phoenixthrush

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    AniWorld Downloader before 5.3.0 WebUI Login Brute Force via /login

    AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to guess passwords without throttling. Attackers can enumerate usernames through …