16272 matches found
PT-2026-120588
Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by submitting regex patterns to POST /api/v1/login. Attackers can send alternations or prefixes like admin|root or a. and distinguish 'Invalid User' from...
CVE-2024-7478: Observable Response Discrepancy
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
Linux Distros Unpatched Vulnerability : CVE-2026-88834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build...
PT-2026-120603
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
Malicious code in rs-lookout-sandbox-poc (npm)
Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at https://webhook.site/553dad0e-c841-46a8-b07d-213b52a24686/, transmitting the installer's...
Malicious code in memories-core-web (npm)
Source: amazon-inspector 5aa2bc32ff519468287f8a87deeff1349332b710735b9f78ee34ffd46c9511cb package.json declares a preinstall lifecycle script that runs curl to a hardcoded webhook.site collector URL https://webhook.site/b2967b0a-1b24-4670-8ae1-e09e3cf272c4/ with the installer's hostname and...
Malicious code in rs-lookout-sandbox-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...
MAL-2026-18109 Malicious code in rs-lookout-sandbox-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...
MAL-2026-18106 Malicious code in memories-core-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa2bc32ff519468287f8a87deeff1349332b710735b9f78ee34ffd46c9511cb package.json declares a preinstall lifecycle script that runs curl to a hardcoded webhook.site collector URL...
Malicious code in nwfp-build-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905a5825cb8abf7b385b98cfade02c315a4bc776bc37cfacd5ab20d5b8d03640 On require of nwfp-build-config, index.js loads lib/telemetry.js, which immediately runs an IIFE that reads the installer's hostname os.hostname and...
MAL-2026-18107 Malicious code in nwfp-build-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905a5825cb8abf7b385b98cfade02c315a4bc776bc37cfacd5ab20d5b8d03640 On require of nwfp-build-config, index.js loads lib/telemetry.js, which immediately runs an IIFE that reads the installer's hostname os.hostname and...
Chris Trudesk: Vulnerability in input validation
Chris Trudesk versions 1.2.11 and earlier have a vulnerability in input validation. This vulnerability stems from regular expression injection: unvalidated attackers can submit regular expression patterns to the POST /api/v1/login endpoint. By distinguishing the responses for invalid usernames an...
CLSA-2026-1792081157 openssh: Fix of 4 CVEs
CVE-2026-106555: reset GSSAPI client state before each authentication attempt upstream 670510d1 - CVE-2026-106553: store delegated GSSAPI credentials only after successful authorization upstream 6f9cd19a - CVE-2026-106583: disallow '$' and '' in a command-line user name upstream 0c4c9a7b -...
MariaDB 10.6.0 < 10.6.28/ 10.11.0 < 10.11.19/ 11.4.0 < 11.4.13/ 11.8.0 < 11.8.9/ 12.3.0 < 12.3.3/ 13.0.0 < 13.0.2
The version of MariaDB installed on the remote host is prior to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-g2q2-3936-cp37 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until...
CVE-2025-13591
The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user account...
CVE-2025-13591
The authentication endpoint of WSO2 Identity Server is vulnerable to username enumeration because it produces inconsistent system responses when an invalid username is submitted. Attackers can exploit this observable discrepancy to identify valid user accounts within the system. Successful enumer...
EUVD-2025-211119
The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user account...
CVE-2025-13591 Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery
The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate between valid and invalid usernames. This difference in responses can be leveraged to enumerate existing user account...
FacturaScripts Cross-Site Scripting Vulnerabilities
FacturaScripts version 2025.61 has a cross-site scripting vulnerability. This vulnerability arises from the application returning different responses for login requests with valid and invalid usernames. Unauthenticated attackers can enumerate valid usernames by analyzing differences in response...
PT-2026-117488
Name of the Vulnerable Software and Affected Versions WSO2 Identity Server affected versions not specified Description The authentication endpoint fails to provide a consistent system response when a username does not exist, allowing attackers to differentiate between valid and invalid usernames...