Uber: Email Enumeration Vulnerability

Hello, I identified from one of your disclosed reports : the report 143291 that you added "security measures to help mitigate email enumeration" . However , I found a way to identify valid emails registered on Uber.com . I used the SIGN UP form to find if an email is valid or not. Proof of concep...

Bluto - DNS Recon, DNS Zone Transfer, and Email Enumeration

BLUTO DNS recon | Brute forcer | DNS Zone Transfer | Email Enumeration The target domain is queried for MX and NS records. Sub-domains are passively gathered via NetCraft. The target domain NS records are each queried for potential Zone Transfers. If none of them gives up their spinach, Bluto wil...

Coinbase: User email enumuration using Gmail

Hi, Using Gmail it is possible to get the list of email addresses that use/have coinbase accounts. as a prerequisite: we will need a script to bruteforce a list of email addresses. consider this script: python import random values only contain small letters and numbers letters =...

Keybase: No rate limiting for sensitive actions (like "forgot password") enables user enumeration

Hi there, I noticed a small information leak which allows an attacker to check whether an email address is associated with an account. Steps to reproduce: Send a POST-Request to the url POST //api/1.0/send-reset-pw.json HTTP/1.1 as the following example shows: POST //api/1.0/send-reset-pw.json...

Slack: Email enumeration

Navigate to the page - https://slack.com/signin Now, entering invalid email address returns an erroneous response. However, if you enter a valid email address like [email protected], it redirects you to a different page where it asks you to choose teams that belongs to [email protected]. You can then...

Cisco WebEx Training Center email枚举漏洞

Bugtraq ID:64292 CVE ID:CVE-2013-6968 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center中的培训注册页面存在安全漏洞，允许远程未验证远程攻击者枚举注册参会者的Email地址。 漏洞是由于注册错误系哦啊系，允许用户通过判断注册过程中返回的不同消息来获取其他用户的email地址信息。攻击者发送多个注册请求可触发该漏洞。 0 Cisco WebEx Training Center 厂商补丁： Cisco -----...

CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...