CVE-2022-26656: Undefined Security Weakness

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join...

PT-2022-17989

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 27.3 Description The issue allows remote attackers to trigger a software abort and possibly enumerate usernames via One Touch Join. Recommendations For versions prior to 27.3, update to version 27.3 or later to...

PT-2022-20215

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The system allows unauthorized viewing of usernames and passwords, enabling access to the system. The issue is accessible via the "http://api/sys username passwd.cmd" API endpoint...

Pexip Infinity security vulnerabilities

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to an input validation error that could be exploited by an attacker to trigger a software abort via One Touch Joi...

PT-2022-20436

Name of the Vulnerable Software and Affected Versions Gentics CMS versions prior to 5.43.1 Description The issue concerns stored XSS in the profile description and in the username. Recommendations For versions prior to 5.43.1, update to version 5.43.1 or later to resolve the issue...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

Code injection

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The CVE-2022-32425 entry concerns Mealie (v1.0.0beta-2) where the login function enables username enumeration by measuring response time, indicating an information-disclosure vulnerability. Affected software: Mealie v1.0.0beta-2 (login feature). Root cause: timing-based information leakage during...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

CVE-2022-32425: Observable Discrepancy

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time...

PT-2022-21314

Name of the Vulnerable Software and Affected Versions Mealie version 1.0.0beta-2 Description The issue allows attackers to enumerate existing usernames by timing the server's response time through the login function. Recommendations For Mealie version 1.0.0beta-2, consider restricting access to t...

Mealie security vulnerability

Mealie is a self-hosted recipe manager and meal planner by an individual developer in Hayden, USA. A security vulnerability exists in Mealie v1.0.0beta-2, which stems from a login feature that allows an attacker to enumerate existing usernames by timing the server's response time...

GHSA-PP3F-98QG-5G75 aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges...

aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges...

CVE-2017-20127: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...

PT-2022-7994

Name of the Vulnerable Software and Affected Versions KB Login Authentication Script version 1.1 Description A critical issue was found, affecting some unknown functionality. The manipulation of the username/password argument with the input 'or''=' leads to sql injection. The attack can be launch...

PT-2022-7995

Name of the Vulnerable Software and Affected Versions KB Messages PHP Script version 1.0 Description A critical issue has been found, affecting an unknown functionality. The manipulation of the username and password arguments with the input 'or''=' leads to SQL injection. This can be exploited...