CVE•Published 2025-09-01•Modified 2026-06-06•1 article on news•4 live references•NVD data
CVE-2025-2412
Vulnerability data via NVD (ingested)
CVSS v3.1
8.6
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
EPSS percentile
23
Exploit Prediction Scoring System · top 77% of all CVEs
Weaknesses (CWE)
Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft QR Menu allows Authentication Bypass. This issue affects QR Menu: from s1.05.07 before v1.05.12.
Timeline
Published 2025-09-01
Modified 2026-06-06
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2025-2412Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2025-2412Censys host search filtered to this CVE id.
grep.app
CVE-2025-2412Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2025-2412GitHub code search for direct mentions.
Google dork
"CVE-2025-2412" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2025-24128 repos
mallahyari/ml-practical-usecasesunknown
A database of 650 Machine Learning (ML) system design case studies from 100+ companies.
DaoYiSec/SecSkillsunknown
收集整理渗透测试、漏洞扫描、代码审计、CTF、逆向、安全研究 等网络安全相关的 Skills和MCP
Yeti-791/Awesome-Offensive-AI-Agentic-Landscapeunknown
This document curates open-source projects, academic papers, capability benchmarks, and commercial solutions (international & China) in AI penetration testing, LLM red teaming, aut…
xpaysh/awesome-x402unknown
🚀 Curated list of x402 resources: HTTP 402 Payment Required protocol for blockchain payments, crypto micropayments, AI agents, API monetization. Includes SDKs (TypeScript, Python,…
open3e/open3ePython
connects E3 (Vitocal, Vitodens, VX3/Vitocharge etc) controller through CAN or DoIP via local access
AthenaCore/AwesomeResponsibleAIunknown
A curated list of awesome academic research, books, code of ethics, courses, databases, data sets, frameworks, institutes, maturity models, newsletters, principles, podcasts, regu…
Josh-blythe/bordair-multimodalPython
Open-source cross-modal and multimodal prompt injection test suite. 250,000+ attack payloads across text, image, document, and audio modalities. Research-backed by OWASP LLM Top 10…
Xuchen-Li/cv-arxiv-dailyPython
Automatically update arXiv papers about SOT & VLT, Multi-modal Learning, LLM and Video Understanding using Github Actions.