Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-56224 — Documents an OTP verification bypass vulnerability in Ascertia SigningHub, allowing attackers to brute-force OTP codes and impersonate mobile numbers. Includes CVSS score, affected versions, and mitigation advice. | Kitploit
Tools/GitHubGitHub/saykino/cve-2025-56224
Vulnerability AnalysisExploitationWeb SecurityPenetration TestingAuthentication
GitHubsaykino/cve-2025-56224

CVE-2025-56224

Documents an OTP verification bypass vulnerability in Ascertia SigningHub, allowing attackers to brute-force OTP codes and impersonate mobile numbers. Includes CVSS score, affected versions, and mitigation advice.

View Repository
10 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-56224 (OTP) verification Bypass

Description

an attacker can impersonate another user mobile number and use this vulnerability to verify the number without knowing the OTP code.

CVSS Score: 8.1 (High)

Attack Type

  • Remote (Authenticated)

Affected Versions

  • Versions before <= 8.6.8

Vendor of Product

  • Ascertia

Affected Product Code Base

  • SigningHub

Affected Component

  • Mobile number verification function.

Mitigations

  • Revoke the OTP code if a number of attempt passed certain value.

Vulnerability Details

  • The application does not enforce proper rate limiting on the One-Time Password (OTP) verification endpoint. This allows an attacker to automate and brute-force OTP codes without restriction. By sending a high volume of OTP guesses in rapid succession, an attacker can potentially bypass the OTP verification mechanism of the mobile number.

Fixed versions

  • Versions after > 8.6.8

Discovered By:

  • Yazan Abu-Nadi
Download Tool