Information disclosure

The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

CVE-2019-8448

The login.jsp resource in Jira before version 7.13.4, and from version 8.0.0 before version 8.2.2 allows remote attackers to enumerate usernames via an information disclosure vulnerability...

User enumeration through the issueTable resource - CVE-2019-8446

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check...

PT-2019-16408 · Mongodb +3 · Mongodb Server +4

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.0.9 MongoDB Server versions prior to 3.6.13 MongoDB Server versions prior to 3.4.22 Description: The improper invalidation of authorization sessions in MongoDB Server allows an authenticated user's session t...

CVE-2017-18465

cPanel before 62.0.17 does not have a sufficient list of reserved usernames SEC-227...

Design/Logic Flaw

cPanel before 62.0.17 does not have a sufficient list of reserved usernames SEC-227...

CVE-2017-18465

CVE-2017-18465 : cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227). This is reported consistently across sources (NVD, Red Hat, CNVD, etc.). The materials provided do not specify any affected subcomponents beyond the version, exploitation details, or a publishe...

cPanel SQL Injection Vulnerability (CNVD-2019-26351)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...

CVE-2017-18394

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2017-18394

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2017-18401

cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats SEC-334...

Design/Logic Flaw

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2017-18394

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2017-18394

CVE-2017-18394 affects cPanel prior to 68.0.15, where the reserved usernames list is insufficient (SEC-327). The Red Hat entry repeats the same description. No further technical details (vulnerable component, exploit specifics, affected products beyond cPanel, or concrete remediation/patch versio...

CVE-2016-10839

cPanel before 11.54.0.4 allows SQL injection in bin/hordeupdateusernames SEC-71...

MOMO Momo application for Android trust management issue vulnerability

MOMO Momo application for Android is an open social application based on Android platform by China Stranger Technology MOMO. A trust management vulnerability exists in version 2.1.9 of the MOMO Momo application for Android, which stems from the program's failure to securely store confidential...

UBUNTU-CVE-2019-12469

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

The vulnerability of the HTTP-server of the IDAL user interface design tool PB610 Panel Builder 600 (SAP500900R0101) allows a attacker to execute arbitrary code or cause a failure in the HTTP-server’s operation.

The vulnerability of the HTTP-server of the IDAL user interface design tool PB610 Panel Builder 600 SAP500900R0101 is related to errors in processing strings containing the user name or cookies during authentication processes. Exploiting this vulnerability could allow a malicious actor to execute...

ipswitch WS_FTP Server Directory Traversal Vulnerability (CNVD-2019-24249)

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. The vulnerability can be exploited by an attacker to obtain WSFTP usernames and filenames via the SCP protocol...

Userrecon - Find Usernames Across Over 75 Social Networks

Find usernames across over 75 social networks This is useful if you are running an investigation to determine the usage of the same username on different social networks. Author: @linuxchoice Download Userrecon...