CVE-Newgen-Software-Advisories

Newgen Software – Provas de Conceito de CVE Este repositório contém material de Prova de Conceito PoC e documentação técnica para múltiplas vulnerabilidades CVE descobertas em produtos desenvolvidos por Newgen Software Technologies Limited. As vulnerabilidades documentadas aqui são CVEs...

CVE-2025-69908

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...

Newgen OmniApp security vulnerability

Newgen OmniApp is a mobile application development framework provided by the American company Newgen. Newgen OmniApp has a security vulnerability, which stems from the ability to enumerate valid privileged user names through publicly accessible client-side JavaScript resources, potentially leadin...

CVE-2025-69908

The CVE-2025-69908 entry concerns Newgen OmniApp, where an unauthenticated information disclosure vulnerability can enumerate valid privileged usernames through a publicly accessible client-side JavaScript resource. Affected component is the client-side JavaScript used by OmniApp; root cause is e...

CVE-2025-69908

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...

PT-2026-4473

Name of the Vulnerable Software and Affected Versions Newgen OmniApp affected versions not specified Description An unauthenticated information disclosure issue exists in Newgen OmniApp. This allows attackers to identify valid privileged usernames through a publicly accessible client-side...

CVE-2025-69908

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...

CVE-2025-69908

An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a publicly accessible client-side JavaScript resource...