10910 matches found
CVE-2025-58590 Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586
CVE-2025-58586 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from distinct error messages for login failures (incorrect password vs. non-existent username), enabling attacker-driven username enumeration. Reported impact: information disclosure (us...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58583 User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled...
CVE-2025-58583 User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled...
CVE-2025-58583
CVE-2025-58583 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from a login-protected H2 database used for caching where the username is prefilled, potentially enabling unauthorized access to the system. The available connected documents describe th...
PT-2025-40859
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description An absence of authentication allows unauthenticated users to request data from an endpoint, leading to potential user enumeration. The application is susceptible to user enumeration due to this lack ...
PT-2025-40866
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The application reveals whether a username exists during failed login attempts by returning different error messages for incorrect passwords versus non-existent usernames. This enables an attacker to...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a lack of authentication and could lead to a user enumeration attack...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...
Exploit for CVE-2025-56132
CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerab...
EUVD-2023-34875
Malicious code in bioql PyPI...
EUVD-2022-2360
Malicious code in bioql PyPI...
EUVD-2023-38342
Malicious code in bioql PyPI...
EUVD-2024-3395
Malicious code in bioql PyPI...
EUVD-2022-5582
Malicious code in bioql PyPI...