BIT-KEYCLOAK-2026-37981 Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint

A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lookup endpoint allows a remote authenticated user, who owns at least one User-Managed Access UMA resource, to enumerate and harvest personally identifiable information PII for all realm users. By...

PostHog Analytics PII Enumeration

Uses leaked PostHog personal API keys phx to list projects and sample events that may contain emails and distinct IDs. Auto-discovers from bundles. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate PostHog projects and events PII using leaked personal API keys.""" from kittysploit import fro...

EUVD-2023-25688

Malicious code in bioql PyPI...

Design/Logic Flaw

A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization...

CVE-2023-21520

BlackBerry AtHoc 7.15 Self Service Credential Recovery vulnerability enables PII enumeration, potentially allowing an attacker to associate contact details with an AtHoc IWS organization. Affected software/component: AtHoc 7.15 (Self Service Credential Recovery). Root cause unspecified in sources...

CVE-2023-21520

A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization...

CVE-2023-21520

A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization...

CVE-2023-21520: Undefined Security Weakness

A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization...

PT-2023-18276

Name of the Vulnerable Software and Affected Versions BlackBerry AtHoc version 7.15 Description A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc could allow an attacker to potentially associate a list of contact details with an AtHoc IWS...