Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-54320 | Kitploit
Tools/GitHubGitHub/saykino/cve-2025-54320
Vulnerability AnalysisWeb SecurityMisconfigurationAPI SecurityEmail Security
GitHubsaykino/cve-2025-54320

CVE-2025-54320

View Repository
9 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-54320 Invite User Email Bombing

Description

The invitation API does not implement rate limiting for the target email address. This allows for an Email Bombing attack.

CVSS Score: 7.1 (High)

Attack Type

  • Remote (Authenticated)

Affected Versions

  • Versions before <= 8.6.8

Vendor of Product

  • Ascertia

Affected Product Code Base

  • SigningHub

Affected Component

  • Invite User API.

Mitigations

  • Implement rate-limit for the Invite User API.

Vulnerability Details

  • an attacker can floods a target's inbox with a large volume of invite emails in a short period of time.

Fixed versions

  • Versions after > 8.6.8

Discovered By:

  • Yazan Abu-Nadi
Download Tool