28 matches found
CVE-2025-46047
CVE-2025-46047 Silverpeas = 6.4.2 Username Enumeration PoC Proof-of-Concept script for demonstrating a username enumeration vulnerability in Silverpeas versions 6.4.1 and 6.4.2. Vulnerability Details Affected Software: Silverpeas Affected Versions: 6.4.1, 6.4.2 and potentially earlier versions...
CVE-2026-26744
CVE-2026-26744 A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endpoint. The application returns different error messages for valid and invalid usernames e.g., "The username you've inserted doesn't exist. Plea...
Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)
The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-161 advisory. - Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for...
CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
PT-2026-56099
Summary An unprotected user enumeration vulnerability exists in the account email update endpoint, allowing authenticated users to verify whether email addresses are registered on the panel through automated requests without rate limiting or CAPTCHA protection. Details The account settings page...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
EUVD-2024-37323
Malicious code in bioql PyPI...
EUVD-2025-2003
Malicious code in bioql PyPI...
EUVD-2024-39561
Malicious code in bioql PyPI...
EUVD-2025-23822
Malicious code in bioql PyPI...
CVE-2025-46390
CWE-204: Observable Response Discrepancy...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...