12558 matches found
CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
DEBIAN-CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
CVE-2024-36469
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one...
PT-2025-14521 · Ibm · Ibm Txseries For Multiplatforms
Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms versions 9.1 through 11.1 Description: The issue allows an attacker to enumerate usernames due to an observable login attempt response discrepancy. Recommendations: For versions 9.1 and 11.1, consider restricti...
IBM TXSeries for Multiplatforms 安全漏洞
IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A security vulnerability exists in IBM TXSeries for Multiplatforms versions 9.1 and 11...
Zabbix 安全漏洞
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix that stems from a login failure with a non-existing username that has a different execution tim...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure through the normalization of the loginname attribute. An attacker can determine if a username exists in the system by observing the response behavior during the login process. Remediation Upgrade...
CVE-2025-31124
Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...
CVE-2025-31124 Zitadel allows User Enumeration by loginname attribute normalization
Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...
CVE-2025-31124
CVE-2025-31124 (Zitadel) describes a user enumeration flaw in the login flow caused by normalization of the username when the “Ignoring unknown usernames” setting is enabled. Although the UI prompts for a password and returns “Username or Password invalid” for non-existent users, the normalizatio...
CVE-2025-31122 scratch-coding-hut.github.io Login Links Generation vulnerability
scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field...
CVE-2025-31122 scratch-coding-hut.github.io Login Links Generation vulnerability
scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field...
CVE-2025-2979
WCMS 11 contains a cross-site scripting vulnerability in the Registration component, specifically via manipulating the Username parameter in /index.php?anonymous/setregister. The issue allows remote attackers to induce XSS, with exploitation disclosed publicly and no vendor response noted in the ...
ZITADEL 安全漏洞
ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the age of containers and serverless, open sourced by ZITADEL in Switzerland. ZITADEL suffers from a security vulnerability that stems from username normalization leading to user presence...
PT-2025-13811 · Unknown · Coding Hut
Name of the Vulnerable Software and Affected Versions: Coding Hut versions 1.0-beta3 and earlier Description: The issue allows an attacker to log in to any account by modifying the username field in the login link. This affects the login functionality of the website. Recommendations: For versions...
WCMS 代码注入漏洞
WCMS is a content management system CMS from the individual developers at Vedegis. A code injection vulnerability exists in WCMS version 11, which stems from the fact that incorrect manipulation of the parameter Username can lead to cross-site scripting...
EsafeNet CDG 安全漏洞
EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version 3, which stems from an incorrect operation of the parameter Username that can lead to SQL injection...
PT-2025-13822 · Zitadel · Zitadel
Name of the Vulnerable Software and Affected Versions: Zitadel versions prior to 2.71.6 Zitadel versions prior to 2.70.8 Zitadel versions prior to 2.69.9 Zitadel versions prior to 2.68.9 Zitadel versions prior to 2.67.13 Zitadel versions prior to 2.66.16 Zitadel versions prior to 2.65.7 Zitadel...