CVE-2025-40653

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames...

Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in versions prior to Mautic 6.0.2, which stems from a time-difference attack in the Forgot...

PT-2025-23116 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic affected versions not specified Description: A security issue exists in the "Forget your password" functionality of Mautic, allowing unauthenticated users to enumerate valid usernames through a timing-based attack. This is due to...

CVE-2024-13966

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966 ZKTeco BioTime default password

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...

CVE-2024-13966

CVE-2024-13966 affects ZKTeco BioTime, a web-based time and attendance system. The vulnerability allows unauthenticated attackers to enumerate usernames and log in as any user using the default password 123456, enabling potential administrative access if a user account remains with the default pa...

PT-2025-23021 · Zkteco · Zkteco Biotime

Name of the Vulnerable Software and Affected Versions: ZKTeco BioTime affected versions not specified Description: The issue allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value 123456. Recommendations: For all affected...

ZKTeco BioTime 安全漏洞

ZKTeco BioTime is a powerful web-based time and attendance management software from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco BioTime that could allow an unauthenticated attacker to enumerate usernames and log in to an arbitrary account using the default password 12345...

CVE-2025-40653

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames...

CVE-2025-40653 User enumeration in M3M Printer Server Web

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames...

CVE-2025-40653

CVE-2025-40653 : Affects M3M Printer Server Web. In authentication, a difference in error messages can reveal whether a username is valid, enabling an attacker to perform username enumeration and brute-force attempts. Documents do not specify affected versions, root cause details beyond the valid...

CVE-2025-40653 User enumeration in M3M Printer Server Web

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames...

M3M Printer Server Web 安全漏洞

M3M Printer Server Web is a print service Web page from M3M. A security vulnerability exists in M3M Printer Server Web that stems from a user enumeration issue that could lead to a brute force attack...

PT-2025-22895 · Unknown · M3M Printer Server Web

Name of the Vulnerable Software and Affected Versions: M3M Printer Server Web affected versions not specified Description: A user enumeration issue exists in the user authentication process, where differing error messages could allow an attacker to determine if a username is valid, potentially...

CVE-2025-0693

Variable response times in the AWS Sign-in IAM user login flow allowed for the use of brute force enumeration techniques to identify valid IAM usernames in an arbitrary AWS account...

CVE-2025-24397

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...

CVE-2025-24403

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...

CVE-2025-24011

Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible to determine whether an account exists based on an analysis of response codes and timing of Umbraco management API responses. Versions 14.3.2 and...

CVE-2024-25651

User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses from the /oauth2/token endpoint...