Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 04:19:41 +0000 CVE-2026-68512 — Paaster: No rate limiting on account login, combined with a public username-enumeration/salt endpoint, enables offline… https://db.gcve.eu/vuln/cve-2026-68512 <p><strong>Affected:</strong> WardPearce paaster</p> <p>Paaster is a pastebin application. Prior to version 3.3.0, Paaster&#39;s account login has no rate limiting, lockout, or CAPTCHA of any kind, and a companion endpoint openly discloses whether a username exists along with that account&#39;s password-hashing salts. Together these let an attacker enumerate real accounts and then brute-force their passwords with unlimited, unthrottled attempts. This issue has been patched in version 3.3.0.</p> <p><strong>Affected:</strong> WardPearce paaster</p> <p>Paaster is a pastebin application. Prior to version 3.3.0, Paaster&#39;s account login has no rate limiting, lockout, or CAPTCHA of any kind, and a companion endpoint openly discloses whether a username exists along with that account&#39;s password-hashing salts. Together these let an attacker enumerate real accounts and then brute-force their passwords with unlimited, unthrottled attempts. This issue has been patched in version 3.3.0.</p> https://db.gcve.eu/vuln/cve-2026-68512