Veille CVE

Recherche « phoenixthrush AniWorld Downloader »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « phoenixthrush AniWorld Downloader » ✕
  1. CVE-2026-108580 6.5 Moyenne

    phoenixthrush AniWorld Downloader

    AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to guess passwords without throttling. Attackers can enumerate usernames through verify_user response timing and brute-force passwords on exposed WebUI instances to take over accounts.