11710 matches found
Email Enumeration Attack
org.keycloak, keycloak-parent is vulnerable to Email Enumeration Attack. The vulnerability allows a logged-in user to enumerate valid account emails...
Server Side Request Forgery
github.com/usememos/memos is vulnerable to Server Side Request Forgery. The vulnerability is due to improper input validation at the /o/get/httpmeta endpoint in the file httpgetter.go, allowing unauthenticated users to enumerate the internal network and receive limited HTML values in JSON form...
HCL Technologies HCL Connections User Enumeration Vulnerability
HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A user enumeration vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by an attacker to determine if a user is valid, leading to a brute forc...
CVE-2024-29029
Memos: CVE-2024-29029 describes an SSRF flaw at the /o/get/image endpoint in memos 0.13.2 that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is echoed into the current server response, enabling a reflected XSS. The vulnerab...
CVE-2024-29030
CVE-2024-29030 : The memos project (github.com/usememos/memos) has a reported SSRF in the /api/resource endpoint affecting version 0.13.2. Authenticated users could enumerate internal network resources via this endpoint. The Nuclei template and Red Hat/OSV/NVD references corroborate this SSRF iss...
WordPress Poll Maker plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration vulnerability
Missing Authorization to Unauthenticated Email Enumeration vulnerability discovered by Krzysztof Zając in WordPress Plugin Poll Maker versions = 5.1.8...
memos 安全漏洞
memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos version 0.13.2, which stems from /o/get/image allows an unauthenticated user to enumerate the internal network and retrieve images, with the response to the image...
memos 安全漏洞
memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos version 0.13.2, which stems from /o/get/httpmeta allows unauthenticated users to enumerate the internal network and receive limited html values in the form of json...
CVE-2024-23557
HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack...
CVE-2024-23557
HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack...
CVE-2024-23557 HCL Connections is vulnerable to a user enumeration vulnerability
HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack...
CVE-2024-23557 HCL Connections is vulnerable to a user enumeration vulnerability
HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack...
CVE-2024-23557
Summary: CVE-2024-23557 affects HCL Connections (versions 7.0–8.0). The vulnerability is user enumeration, where certain actions reveal whether a given username exists, enabling brute-force style attacks. What’s affected: HCL Connections core platform; specific versions 7.0–8.0 are cited in conne...
PT-2024-19938 · Hcl · Hcl Connections
Name of the Vulnerable Software and Affected Versions: HCL Connections versions 7.0 through 8.0 Description: HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if a user is valid or not, leading to a possible brute force attack. This...
PT-2024-22683 · Memos · Memos
Name of the Vulnerable Software and Affected Versions: memos versions 0.13.2 through 0.21.x Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. It exists at the /api/resource endpoint, allowing authenticated users to enumerate the internal network...
Poll Maker – Best WordPress Poll Plugin < 5.1.9 - Missing Authorization to Unauthenticated Email Enumeration
Description The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ayspollcreateauthor function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to...
HCL Technologies HCL Connections 安全漏洞
HCL Technologies HCL Connections is a suite of enterprise collaboration platforms from HCL Technologies. A user enumeration vulnerability exists in HCL Technologies HCL Connections versions 7.0 and 8.0, which can be exploited by an attacker to determine if a user is valid, leading to a brute forc...
GHSA-R52H-FJM7-93J8 BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery
Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration...
BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery
Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration...