CVE-2025-1928

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation.

This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-19297.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. RCVE-2025-19308.8On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. ThCVE-2025-19317.5It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable craCVE-2025-19328.1An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 1CVE-2025-19337.6On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them toCVE-2025-19346.5It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection wheCVE-2025-19354.3A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in FirefCVE-2025-19367.3jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content frCVE-2025-19377.5Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugsCVE-2025-19386.5Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of CVE-2025-19393.9Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to triCVE-2025-19407.1A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used to trick a user in
CVE-2025-1928: Critical severity, CVSS 9.1 | Vulnix