CVE-2022-24633

CVE-2022-24633 concerns FileCloud software. All versions before 21.3 are vulnerable to user enumeration due to the path parameter handling in "/SHARED/". A malicious actor could determine whether a user exists by requesting share information for specific shares. The vulnerability impact is user e...

Cerebrate has an unspecified vulnerability (CNVD-2022-77057)

Cerebrate is an open source platform. Designed to act as an interconnected orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from the possibility of username enumeration. No detailed vulnerability details...

CVE-2022-0564

A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time...

Qlik Community 信息泄露漏洞

Qlik Community is a data analytics solution. Qlik Community suffers from an information disclosure vulnerability that originates from allowing a remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authenticated requests to an affected system...

CVE-2022-25320

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur...

CVE-2022-25320

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur...

Code injection

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur...

CVE-2022-25320

CVE-2022-25320 affects Cerebrate up to version 1.4, with a vulnerability that allows username enumeration. The connected sources consistently describe the issue as a username enumeration problem in Cerebrate 1.4 or earlier; no explicit technical details about the root cause, exploit vector, or im...

Cerebrate 安全漏洞

Cerebrate is an open source platform. Designed to act as an interconnected orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from the possibility of username enumeration. No detailed vulnerability details...

CVE-2022-25320

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur...

CVE-2022-25320

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur...

PT-2022-17209 · Cerebrate · Cerebrate

Name of the Vulnerable Software and Affected Versions: Cerebrate versions through 1.4 Description: An issue was discovered that allows username enumeration to occur. Recommendations: For versions through 1.4, consider restricting access to sensitive user information to minimize the risk of...

ServiceNow Orlando Username Enumeration

Exploit Title: ServiceNow - Username Enumeration Google Dork: NA Date: 12 February 2022 Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2021-45901/ Vendor Homepage: https://www.servicenow.com/ Software Link:...

ServiceNow - Username Enumeration

Exploit Title: ServiceNow - Username Enumeration Google Dork: NA Date: 12 February 2022 Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2021-45901/ Vendor Homepage: https://www.servicenow.com/ Software Link:...

H3C SSL VPN - Username Enumeration

Exploit Title: H3C SSL VPN - Username Enumeration Exploit Author: LiquidWorm H3C SSL VPN Username Enumeration Vendor: Hangzhou H3C Technologies Co. | New H3C Technologies Co., Ltd. Product web page: https://www.h3c.com Affected version: n/a Summary: H3C SSL VPN is a secure VPN system based on SSL...

ServiceNow - Username Enumeration Exploit

Exploit Title: ServiceNow - Username Enumeration Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2021-45901/ Vendor Homepage: https://www.servicenow.com/ Software Link:...

CVE-2022-25190

A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2022-25190

A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

Information Disclosure

snipe/snipe-it is vulnerable to information disclosure. A remote unauthenticated attacker is able to enumerate users through the response message in the password reset page to figure out on which email address to try a password brute-force attack and gain access to user credentials...

PT-2022-17130 · Jenkins · Jenkins Conjur Secrets Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Conjur Secrets Plugin versions 1.0.11 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This can be done...