Soosyze CMS 2.0: When Rate Limiting Takes a Vacation! 🚫🔓
Soosyze CMS 2.0 has a vulnerability that makes it an open buffet for brute-force login attacks. With no rate limits or lockouts, attackers can keep guessing passwords like “123456” until they hit the jackpot, gaining unauthorized access faster than you can say CVE-2025-52392.
Hot Take:
Soosyze CMS 2.0 is about as secure as a screen door on a submarine when it comes to brute force attacks. The real security feature here is the attacker’s boredom threshold. With zero rate limiting or account lockout, this CMS is like an open buffet for hackers, and they’re bringing their biggest appetite. Someone call the cyber cops because this is one open door that needs closing fast!
Key Points:
- Soosyze CMS 2.0 is vulnerable to brute force login attacks.
- Missing rate limiting and account lockout features are to blame.
- The exploit uses a bash script with customizable wordlists.
- Tested on macOS Sonoma 14.x with various bash and curl versions.
- CVE-2025-52392 has been assigned to this vulnerability.
Already a member? Log in here