3981 matches found
IBM Rational ClearQuest 7.1.x < 7.1.2.15 / 8.0.0.x < 8.0.0.12 / 8.0.1.x < 8.0.1.5 Multiple Vulnerabilities (credentialed check)
The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.15 / 8.0.0.x prior to 8.0.0.12 / 8.0.1.x prior to 8.0.1.5 installed. It is, therefore, potentially affected by multiple vulnerabilities : - A security bypass vulnerability exists due to an error in the login form which...
Yelp: Information disclosure - emails disclosed in response > staging.seatme.us
Hello, I found a info disclosure vulnerability. We can enumerate emails via userid parameter from Manage users. And I found that : ID 1 is ██████ ID 514755 is ████████ ID 514775 is █████ ID 514764 is ███████ I attached photos from burp repeater to be more explicit. We can easily bruteforce userid...
Mobile Vikings: Username and sim id enum
Look at this url GET request https://mobilevikings.be/en/sims/authorization/remove/admin/1036358/ - looks good - admin user detected https://mobilevikings.be/en/sims/authorization/remove/lloyd/1036358/ - looks good - lloyd user detected...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the Forgot Password process of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate a valid administrator account. The vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by submitting...
ManageEngine ServiceDesk Plus 'search' Parameter User Enumeration Vulnerability
ServiceDesk Plus is web-based helpdesk software that helps users manage all their communications from a single point. A user enumeration vulnerability exists in the ManageEngine ServiceDesk Plus 'search' parameter, which can be exploited by an attacker to obtain a valid user account via a brute...
REWTERZ-20140102 - ManageEngine ServiceDesk Plus User Enumeration Vulnerability
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
ManageEngine ServiceDesk 9.0 User Enumeration Vulnerability
ManageEngine ServiceDesk version 9.0 prior to build 9031 suffers from a remote user enumeration vulnerability. Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk Plus http://www.manageengine.com/ Affected Version: 9.0 Other versions could also be affected Fix...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL reques...
ManageEngine ServiceDesk 9.0 User Enumeration
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
ManageEngine ServiceDesk Plus 9.0 - User Enumeration ================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plu...
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to guess valid user accounts on the targeted system. The vulnerability exists because the affected software fails to refresh the CAPTCHA on the login page. An attacker could exploit this vulnerability b...
Wordpress Photo Gallery Unauthenticated SQL Injection User Enumeration Exploit
This Metasploit module exploits an unauthenticated SQL injection in order to enumerate the Wordpress users tables, including password hashes. This Metasploit module was tested against version 1.2.7. This module requires Metasploit: http://metasploit.com/download Current source:...
Wordpress Photo Gallery Unauthenticated SQL Injection User Enumeration
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 "Wordpress Photo Gallery Unauthenticated SQL Injection User Enumeration", 'Description' = %q This module exploits an unauthenticated...
Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00225)
Cisco WebEx Meetings are web conferencing solutions. A user enumeration vulnerability exists in Cisco WebEx Meetings Server, which could be exploited by an attacker to obtain valid user accounts via a brute force attack...
Cisco WebEx Meetings Server User Enumeration Vulnerability (CNVD-2015-00224)
Cisco WebEx Meetings are web conferencing solutions. The web framework in Cisco WebEx Meetings Server generates different return messages based on the presence or absence of a URL request for a username, allowing a remote attacker to enumerate user accounts through a series of requests...
Cisco Unified Communications Manager IM and Presence Service Enumeration Vulnerability (CSCur63497)
According to its self-reported version, the Cisco Unified Communications Manager IM and Presence Server installed on the remote host is affected by a user enumeration vulnerability due to improper sanitation of returned messages. An attacker can exploit this vulnerability by sending a series of...
Dropbox: WP User Enumeration is possible at https://blog.dropbox.com
Hello security team. I like to report this bug I found. Here are some user ID's proofing user enumeration is possible. User ID 2 : drew User ID 4 : jon User ID 6 : arash User ID 9 : dan User ID 10 : arash-ferdowsi User ID 11 : dropbox-team User ID 13 : ivan It is recommended to rename the admin...
CVE-2014-8035: Exposure of Sensitive Information to an Unauthorized Actor
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...
CVE-2013-6043
CVE-2013-6043 affects Softaculous Webuzo prior to 2.1.4 where the login function reveals different error messages depending on whether a user account exists, allowing remote username enumeration. The issue is documented alongside related vulnerabilities (CVE-2013-6041/6042) in Webuzo 2.1.3-era ad...