12592 matches found
PT-2025-3916 · Fanli2012 · Native-Php-Cms
Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file /fladmin/login.php. The manipulation of the username argument leads to SQL injection. This issue...
native-php-cms 安全漏洞
native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in native-php-cms version 1.0, which originates from the parameter username in the file /fladmin/login.php that can cause SQL injection...
CVE-2024-56841
A vulnerability has been identified in Mendix LDAP All versions V1.1.2. Affected versions of the module are vulnerable to LDAP injection. This could allow an unauthenticated remote attacker to bypass username verification...
CVE-2024-56841
A vulnerability has been identified in Mendix LDAP All versions V1.1.2. Affected versions of the module are vulnerable to LDAP injection. This could allow an unauthenticated remote attacker to bypass username verification...
CVE-2024-56841
CVE-2024-56841 affects Mendix LDAP module (all versions
CVE-2024-42174
HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames...
CVE-2024-42174
HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames...
CVE-2024-42173
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known...
CVE-2024-42174 HCL MyXalytics is affected by username enumeration vulnerability
HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames...
CVE-2024-42174 HCL MyXalytics is affected by username enumeration vulnerability
HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames...
CVE-2024-42174
CVE-2024-42174 affects HCL DRYiCE MyXalytics (HCL MyXalytics). The vulnerability is a username enumeration issue that allows a malicious user to enumerate application users and compile a list of valid usernames. Public sources in the connected set confirm the affected product and the basic impact...
CVE-2025-0107
CVE-2025-0107 – Palo Alto Networks Expedition OS command injection . The connected templates confirm an OS command injection in Palo Alto Networks Expedition that allows an unauthenticated attacker to execute arbitrary OS commands as the www-data user, leading to disclosure of usernames, cleartex...
HCL DRYiCE MyXalytics 安全漏洞
HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to a username enumeration vulnerability...
PT-2025-2624 · Hcl · Hcl Myxalytics
Name of the Vulnerable Software and Affected Versions: HCL MyXalytics affected versions not specified Description: The issue allows a malicious user to perform enumeration of application users, compiling a list of valid usernames through a username enumeration vulnerability. Recommendations: At t...
Vaultwarden HTML injection vulnerability
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...
GHSA-G5X8-V2CH-GJ2G Vaultwarden HTML injection vulnerability
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...
CVE-2024-55224
Vaultwarden (before 1.32.5) is affected by an HTML injection vulnerability that could allow an attacker to execute arbitrary code by injecting a crafted payload into the username field of an e‑mail message. The issue is described across multiple sources (including GHSA and OSV) as a Vaultwarden H...
Vaultwarden 安全漏洞
Vaultwarden is an alternative implementation of the Bitwarden server API written in Rust by Daniel García Personal Developer. A security vulnerability exists in Vaultwarden versions prior to v1.32.5. An attacker exploiting this vulnerability could execute arbitrary code by injecting a specially...
PT-2025-3102 · Unknown · Vaultwarden
Name of the Vulnerable Software and Affected Versions: Vaultwarden versions prior to 1.32.5 Description: The issue allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message. This is an HTML injection vulnerability. Recommendations: For...