12558 matches found
CVE-2025-31941 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
An unauthenticated attacker can obtain a list of smart devices by knowing a valid username...
CVE-2025-31933 Growatt Cloud Applications Authorization Bypass Through User-Controlled Key
An unauthenticated attacker can check the existence of usernames in the system by querying an API...
CVE-2024-11084
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...
CVE-2024-11084 Potential Username Enumeration in Helix ALM
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...
CVE-2024-11084
CVE-2024-11084 affects Perforce Helix ALM prior to 2025.1. The issue is that authentication returns distinct error responses, enabling an attacker to determine whether a username exists (username enumeration). The connected sources (RH Red Hat, NVD, CVE Lists, CNNVD) corroborate the same descript...
CVE-2024-11084 Potential Username Enumeration in Helix ALM
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...
Telegram-Checker - A Python Tool For Checking Telegram Accounts Via Phone Numbers Or Usernames
Enhanced version of bellingcat's Telegram Phone Checker! A Python script to check Telegram accounts using phone numbers or username. โจ Features ๐ Check single or multiple phone numbers and usernames ๐ Import numbers from text file ๐ธ Auto-download profile pictures ๐พ Save results as JSON ๐ Secure...
PT-2025-16414
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can infer the existence of usernames in the system by querying an API. Recommendations At the moment, there is no information about a newer version that contains a...
Growatt Cloud Applications ๅฎๅ จๆผๆด
Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which originates from an unauthenticated attacker being able to infer the presence of a username on the system...
PT-2025-16392
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can check the existence of usernames in the system by querying an API. Recommendations At the moment, there is no information about a newer version that contains a...
Growatt Cloud Applications ๅฎๅ จๆผๆด
Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and earlier, which originates from an unauthenticated attacker being able to check the existence of a username in the system via an API...
PT-2025-16290 ยท Unknown ยท Vision Helpdesk
Name of the Vulnerable Software and Affected Versions: Vision Helpdesk versions 5.7.0 and earlier Description: The issue allows Time-Based Blind SQL injection via the vis username parameter in the Forgot Password feature, also known as index.php?/home/forgot-password. No authentication is require...
Perforce ALM ๅฎๅ จๆผๆด
Perforce ALM Helix ALM is an application lifecycle management software from Perforce. A security vulnerability exists in Perforce ALM versions prior to 2025.1 that stems from a different error response being returned during authentication, which could lead to username enumeration...
Exploit for CVE-2025-46047
CVE-2025-46047 Silverpeas -u Example...
Metabase ๆฅๅฟไฟกๆฏๆณ้ฒๆผๆด
Metabase is an open source data analytics platform from US-based Metabase, Inc. A log information disclosure vulnerability exists in Metabase that stems from not properly clearing old connection information, leading to username and password disclosure...
e-Diary Management System password-recovery.php File SQL Injection Vulnerability
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter username/contactno of the password-recovery.php file. An...
Roommate-Bill-Tracking ๆณจๅ ฅๆผๆด
Roommate-Bill-Tracking is a relatively simple PHP application by Hayden Individual Developer for managing expenses between roommates and shared grocery lists. Roommate-Bill-Tracking suffers from an injection vulnerability that stems from the fact that incorrect manipulation of the parameter...
(Pwn2Own) Synology DiskStation DS1823xs+ Vue.JS Improper Neutralization of Argument Delimiters Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation DS1823xs+ devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the provided username during login. The...
CVE-2025-26657
SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability...
CVE-2025-26657 Information Disclosure vulnerability in SAP KMC WPC
SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability...