CVE-2018-11581

Cross-site scripting XSS vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html...

StoreFront Logon Error "Your Request Could Not be Completed"

User are unable to logon and get Event ID 7 and 8 in the event logs, with errors "The template named: UsernamePassword could not be found." and an exception "The creation of a form failed"...

Google Chrome Login Error Security Bypass Vulnerability

Google Chrome is a popular web browser. A security bypass vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to bypass sandbox security restrictions...

StoreFront 2.5 not loading apps

Storefront URL when logging in doesn't load any applications and just comes up after logging in with "Spinning wheel" Issue is fixed by rebooting the Storefront servers every time it happens. Also sometimes "Cannot complete you request" error comes after login...

CVE-2015-7902

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests...

Error: Username or password is incorrect when adding vCloud Director

Challenge Encountering issue "Error: Username or password is incorrect" when adding vCloud Director to Veeam Backup & Replication. Solution 1. Verify that the correct password is being utilized. 2. Ports, Permissions, or DNS issues can cause this failure: 1. Ensure connectivity between the Veeam...

SMB File Upload Utility

This module uploads a file to a target share and path. The only reason to use this module is if your existing SMB client is not able to support the features of the Metasploit Framework that you need, like pass-the-hash authentication. This module requires Metasploit: https://metasploit.com/downlo...

Daloradius XSS Vulnerability

No description provided by source. Script Name : daloradius All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/daloradius/ PoC : http://target/path/daloradius-users/login.php?error="scriptalert'Hadi...

PT-2009-4852 · Ibm · Ibm Lotus Instant Messaging/Web Conferencing

Name of the Vulnerable Software and Affected Versions: IBM Lotus Instant Messaging and Web Conferencing version 6.5.1 Description: The issue allows remote attackers to enumerate valid usernames by analyzing the different time delays in error messages generated for failed logon attempts, depending...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

CVE-2007-3495

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

CVE-2007-3495: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the SAP Internet Communication Framework BC-MID-ICF in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error pa...

CVE-2007-0310

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names...

WebCalendar Login Error Message User Account Enumeration

The version of WebCalendar on the remote host is prone to a user account enumeration weakness in that in response to login attempts it returns different error messages depending on whether the user exists or the password is invalid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2004-0130

login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message...

CVE-2002-0212

The CVE-2002-0212 issue affects Hosting Controller 1.1–1.4.1, where login error messages differ between valid and invalid usernames, enabling remote enumeration of valid accounts and facilitating brute-force attempts. Root cause: inconsistent authentication responses revealing user existence. Imp...

CVE-1999-0987

CVE-1999-0987 affects Windows NT where a domain user logging in with a trailing space in the domain name can cause the system policy to download improperly. The CVSS v2 base score is 10.0 (HIGH) with network attack vector and no authentication required, indicating a severe impact on confidentiali...