CVE-2024-25290

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

CVE-2024-25290: Improper Input Validation

An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

Casa Systems NL1901ACV security vulnerability

Casa Systems NL1901ACV is a wireless router from Casa Systems, USA. A security vulnerability exists in Casa Systems NL1901ACV versions prior to R6B032 that originates from a vulnerability that allows a remote attacker to execute arbitrary code via the userName parameter of the add function...

CVE-2024-30176

In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets...

CVE-2024-30176

In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets...

CVE-2024-32967

Zitadel is an open source identity management system. In case ZITADEL could not connect to the database, connection information including db name, username and db host name could be returned to the user. This has been addressed in all supported release branches in a point release. There is no...

Logpoint security vulnerabilities

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.4.0. An attacker could exploit the vulnerability to enumerate a list of valid usernames by publicly exposing the URL using a shared widget...

PT-2024-23226 · Logpoint · Logpoint

Name of the Vulnerable Software and Affected Versions: Logpoint versions prior to 7.4.0 Description: An issue exists where an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets. Recommendations: For versions prior to 7.4.0, update to version 7.4.0 or...

CVE-2024-30176: Observable Discrepancy

In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets...

CVE-2024-30176

In Logpoint versions prior to 7.4.0 , a security vulnerability allows an attacker to enumerate a valid list of usernames . This occurs by leveraging publicly exposed URLs associated with shared widgets . To resolve this issue, it is recommended to update the software to version 7.4.0 or later . D...

CVE-2024-30176

In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets...

Exploit for Incorrect User Management in Portainer

Portainer CVE-2024-29296 Proof of Concept Script Requireme...

CVE-2023-52723

In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value...

CVE-2023-52723

The KDE libksieve email filtering library (versions before 23.03.80 ) contains a vulnerability in kmanagesieve/session.cpp where a username variable is accidentally assigned a password value. This flaw causes the application to write user passwords in cleartext into server logs. Impacted systems ...

CVE-2024-32884 gix-transport indirect code execution via malicious username

gitoxide is a pure Rust implementation of Git. gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clo...

CVE-2024-32884 gix-transport indirect code execution via malicious username

gitoxide is a pure Rust implementation of Git. gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clo...

GitOxide security vulnerabilities

gitoxide is a git implementation written in Rust by Sebastian Thiel, a solo developer. A security vulnerability exists in gitoxide because gix-transport does not check the username of the URL...

GHSA-98P4-XJMM-8MFH gix-transport indirect code execution via malicious username

Summary gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clone URL is used by an application whose...

gix-transport indirect code execution via malicious username

Summary gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clone URL is used by an application whose...

CVE-2024-31219

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via "whispersallowedgroups" and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the...