Vulnerabilities
Netherman Portal del Hermano Flaw Allows Unauthenticated Account Takeovers
A critical broken authentication flaw in Netherman Portal del Hermano lets attackers hijack accounts by exploiting error messages and missing rate limits.
CVSS 9.1
Everything Threat Times has reported about CVSS 9.1: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Thirty bees 1.7.0 authentication bypass allows guest account takeover
A critical flaw in Thirty bees enables attackers to reset customer passwords using guest checkout tokens, affecting versions through 1.7.0.