CVE-2018-25049

The CVE-2018-25049 entry concerns the email-existence library, specifically the index.js component. The issue is described as an inefficient regular-expression complexity (regular expression denial of service) vulnerability, tied to how email length/validation is handled. The known patch is named...

email-existence 安全漏洞

email-existence is a library for checking the legitimacy of email messages. A security vulnerability exists in email-existence. An attacker exploited the vulnerability to cause an increase in the complexity of regular expressions...

PT-2022-8059 · Unknown · Email-Existence

Name of the Vulnerable Software and Affected Versions: email-existence affected versions not specified Description: A vulnerability was found in email-existence, rated as problematic. It affects some unknown functionality of the file index.js. The manipulation leads to inefficient regular...

CVE-2019-6122

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address...

Nextcloud: The password recovery let users know whether an email address exists or not in the website

URL: https://apps.nextcloud.com/password/reset/ I have tried to recover the password for some emails: [email protected] exists [email protected] does not exists After I clicked the "reset my password"'s button, the website informed that the email did not exist. Impact This is a bad practice, and it ...