CVE-2025-58583 User Enumeration

The application provides access to a login protected H2 database for caching purposes. The username is prefilled...

CVE-2025-58583 User Enumeration

The application provides access to a login protected H2 database for caching purposes. The username is prefilled...

EUVD-2025-32496

The application provides access to a login protected H2 database for caching purposes. The username is prefilled...

CVE-2025-58583

CVE-2025-58583 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from a login-protected H2 database used for caching where the username is prefilled, potentially enabling unauthorized access to the system. The available connected documents describe th...

CVE-2025-11323

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

CVE-2025-11323 UTT 1250GW formUserStatusRemark strcpy buffer overflow

A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter Username in the file /goform/fastsettingpppoeset fails to...

PT-2025-40852

Name of the Vulnerable Software and Affected Versions UTT versions prior to v2v3.2.2-200710 Description A buffer overflow issue exists in the strcpy function within the /goform/formUserStatusRemark file. Manipulation of the Username argument can trigger this issue, potentially allowing for remote...

PT-2025-40939

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.1 Alma Linux affected versions not specified SUSE affected versions not specified IBM AIX affected versions not specified Fortinet FortiWeb affected versions not specified Description OpenSSH before version 10.1...

CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...

PT-2025-40863

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The application provides access to a login-protected H2 database used for caching. The username is prefilled, potentially allowing unauthorized access if defaul...

PT-2025-40866

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The application reveals whether a username exists during failed login attempts by returning different error messages for incorrect passwords versus non-existent usernames. This enables an attacker to...

PT-2025-40864

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The username and password are sent directly in the URL as parameters within HTTP requests. This practice poses a significant risk of sensitive data disclosure, as URLs may be stored in server logs,...

CVE-2025-61984

CVE-2025-61984 affects OpenSSH before 10.1. It allows control characters in usernames originating from untrusted sources (command line or %-sequence expansion in a config file), potentially enabling code execution when a ProxyCommand is used. A config file that provides a complete literal usernam...

PT-2025-40857

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description A security issue exists in Tenda AC18 routers. A stack-based buffer overflow can occur due to manipulation of the Username argument within the /goform/fast setting pppoe set file. This issue is...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...

UTT 1250GW 安全漏洞

The UTT 1250GW is a wireless router from China Aitai UTT. A security vulnerability exists in UTT 1250GW v2v3.2.2-200710 and earlier versions, which stems from an incorrect manipulation of the parameter Username in the file /goform/formUserStatusRemark, which could result in a buffer overflow...

CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...

CVE-2025-11295

A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was...

CVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...