CVE-2021-47664

CVE-2021-47664 describes an authentication issue that allows an unauthenticated remote attacker to enumerate valid usernames. The initial entry provides a CVSS v3.1 base score of 5.3 (Medium) with Network attack vector, Low attack complexity, and no privileges required. The connected sources reit...

Franka Emika Robot security vulnerabilities

Franka Emika Robot is a robot from the German company Franka. A security vulnerability exists in Franka Emika Robot that stems from an improper authentication mechanism that allows an unauthenticated, remote attacker to enumerate valid usernames...

Code-Projects Online Class and Exam Scheduling System Security Vulnerabilities

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which originates from a SQL injection due to incorrect...

PT-2025-17725 · Franka Robotics · Franka Emika Robot

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue exists due to an improper authentication mechanism, allowing an unauthenticated remote attacker to enumerate valid usernames. Recommendations: At the moment, there is no information...

CVE-2025-44135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks...

CVE-2025-44135

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks...

CVE-2025-46462: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Trân Minh-Quân WPVN wpvn-username-changer allows Cross Site Request Forgery.This issue affects WPVN: from n/a through = 0.7.8...

CVE-2021-47664: Observable Discrepancy

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames...

SUSE CVE-2025-43919

GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman aka the private archive authentication endpoint via the username parameter. NOTE: multiple third parties report that they are unable t...

PT-2025-17727

Name of the Vulnerable Software and Affected Versions Spring Security affected versions not specified Description The issue introduces a username enumeration vector. It affects the BCryptPasswordEncoder's maximum password length, which breaks timing attack mitigation. Recommendations At the momen...

CVE-2025-3847

A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

WebServer injection vulnerability

WebServer is a C++ Linux WebServer server by MARK Individual Developers. An injection vulnerability exists in WebServer version 1.0, which originates from SQL injection due to manipulation of the username/password parameters by the Registration component in file code/http/httprequest.cpp...

FlaskBlog Security Vulnerabilities

FlaskBlog is a simple blogging application built using Flask by Doğukan Ürker Personal Developer. A security vulnerability exists in FlaskBlog version 2.6.1, which stems from improper access control and could lead to obtaining all usernames...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-3847: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-28104: Improper Access Control

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-43928

In Infodraw Media Relay Service MRS 7.1.0.0, the MRS web server on port 12654 allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerParameters.xml may reveal administrator credentials in cleartext or with MD5 hashing...

CVE-2025-43919

GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman aka the private archive authentication endpoint via the username parameter. NOTE: multiple third parties report that they are unable t...

CVE-2025-43919

GNU Mailman 2.1.39, as bundled in cPanel and WHM, allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman aka the private archive authentication endpoint via the username parameter. NOTE: multiple third parties report that they are unable t...