ssh_user_enum

sshenumv0.3.py الاستخدام: sshenumv0.3.py options الخيارات: root@kitploit: -h, --help عرض رسالة المساعدة هذه والخروج -u --userlist حدد ملف أسماء مستخدمين مفصولاً بأسطر جديدة -i --ip حدد الهدف -m --multiplier حدد مضاعف كلمة المرور يُستخدم لإحداث التأخير -t --threshold اضبط العتبة وفقًا للمضاعف -p...

tookie-osint

Nous avons dû changer de nom 🔎 Aperçu Tookie-osint a une interface utilisateur simple à utiliser et est très simple. L'idée principale de Tookie-osint est de découvrir les noms d'utilisateur demandés à partir d'une entrée. Tookie-osint est similaire à l'outil appelé Sherlock. Il découvre tous les...

o365enum

تعداد مستخدمي Office 365 تعداد أسماء المستخدمين الصالحة من Office 365 باستخدام ActiveSync أو Autodiscover أو صفحة تسجيل الدخول office.com. الاستخدام سيقرأ o365enum أسماء المستخدمين من الملف المقدم كمعامل أول. يجب أن يحتوي الملف على اسم مستخدم واحد لكل سطر. الإخراج يعتمد على CSV لتسهيل التحليل. يم...

PoC-CVE-2018-15473

إثبات المفهوم - CVE-2018-15473 OpenSSH حتى الإصدار 7.7 معرض لثغرة تعداد المستخدمين بسبب عدم تأخير الخروج للمستخدم غير الصالح بعد تحليل الحزمة التي تحتوي على الطلب بالكامل، ويتعلق ذلك بـ auth2-gss.c و auth2-hostbased.c و auth2-pubkey.c. CVE: CVE-2018-15473 شرح من...

CVE-2018-15473_exploit

CVE-2018-15473 - OPENSSH 7.7 تعداد المستخدمين الاعتماديات: https://github.com/pyperanger/crypt-curve25519 إصلاح التصحيح https://metacpan.org/pod/Net::SSH::Perl المراجع https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5 https://isc.sans.edu/diary/24004...

Wordell

Wordell 🌐 Wordell è un potente script di enumerazione di WordPress progettato per rendere le tue valutazioni di sicurezza su WordPress più efficienti e complete. Ti consente di enumerare le sitemap, scoprire nomi utente, raccogliere i login di WordPress, acquisire screenshot e generare indirizzi ...

EUVD-2024-16187

The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage...

CVE-2024-0391

The CVE-2024-0391 issue affects WSO2 products with the email OTP flow, where the check user account lock states validation fails, enabling attacker enumeration of registered usernames. This disclosure indicates that valid usernames can be inferred, which could facilitate targeted brute-force or s...

PT-2026-39580

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The check user account lock states feature within the email OTP flow fails to validate user input. This allows an attacker to infer whether specific user account...

RHCOS 3 : Red Hat OpenShift Enterprise 3.1.1 update (Important) (RHSA-2016:0070)

The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0070 advisory. - commons-fileupload: Arbitrary file upload via deserialization CVE-2013-2186 - stapler-adjunct-zeroclipboard: multiple cross-site...

ZKTeco ZKBioSecurity 安全漏洞

ZKTeco ZKBioSecurity is a web-based integrated platform developed by ZKTeco Corporation in China. Version 3.0 of ZKTeco ZKBioSecurity contains security vulnerabilities. These vulnerabilities stem from user enumeration, and could allow unverified attackers to discover valid usernames by submitting...

CVE-2005-1650

The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

BIT-DISCOURSE-2025-64528 Users are able to find users by name even when `enable_names` is off

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

PT-2025-48802

Name of the Vulnerable Software and Affected Versions Nagvis Checkmk MultisiteAuth versions prior to 1.9.48 Description An unauthenticated attacker can enumerate Checkmk usernames. This issue affects the user enumeration functionality within the software. Recommendations Update to version 1.9.48 ...

EUVD-2010-0247

Malware in sbrugna...

EUVD-2021-25561

Malware in sbrugna...

EUVD-2009-2664

Malware in sbrugna...

EUVD-2013-4311

Malware in sbrugna...

EUVD-2022-52826

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3023

software: kanboard 1.2.47 WASP: ROSA-CHROME unaffected versions = kanboard-1.2.47-0.gitb57deb.4 affected versions kanboard-1.2.47-0.gitb57deb.4 CVE-ID: CVE-2025-52576 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Kanboard before version 1.2.46 allows existing usernames to be...