ProtOSINT

ProtOSINT ProtOSINT est un script Python qui vous aide à enquêter sur les comptes Proton Mail. Version Il s'agit de ProtOSINT v2. La première version existait depuis quelques années, mais l'API de Proton a changé et les anciennes vérifications ont cessé de fonctionner, donc il s'agit d'une...

sterraxcyl

- S T E R R A - Уникальный SOCMINT-инструмент для получения информации об аккаунте Instagram по его подпискам | подписчикам...

sherlock

Отслеживайте аккаунты в социальных сетях по имени пользователя в более чем 400 социальных сетях Установка • Использование • Участие в разработке Установка !WARNING Пакеты для ParrotOS и Ubuntu 24.04, поддерживаемые третьей стороной, по-видимому, сломаны. Пользователям этих систем следует...

Bluto

BLUTO Reconnaissance DNS | Bruteforce | Transfert de zone DNS | Vérifications de wildcard DNS | Bruteforce de wildcard DNS | Énumération d'emails | Énumération du personnel | Énumération de comptes compromis | Récolte de métadonnées Auteur : Darryl Lane | Twitter : @darryllane101...

MSOLSpray

MSOLSpray Un outil de pulvérisation de mots de passe pour les comptes Microsoft Online Azure/O365. Le script enregistre si un identifiant utilisateur est valide, si l'authentification multifacteur MFA est activée sur le compte, si un locataire n'existe pas, si un utilisateur n'existe pas, si le...

CVE-2026-82043

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2026-82043

Versions of UTMStack prior to 11.2.16 are vulnerable to an account enumeration flaw. An unauthenticated attacker can identify registered email addresses by sending requests to the POST /api/account/reset-password/init endpoint. The application provides different HTTP responses based on the existe...

CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

CVE-2026-82043 UTMStack < 11.2.16 Account Enumeration via Password Reset Endpoint

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

EUVD-2026-91798

UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP responses from the POST /api/account/reset-password/init endpoint. Attackers can submit arbitrary email addresses and...

Scythe

Scythe scythe: перечислитель аккаунтов Перечислитель аккаунтов предназначен для упрощения перечисления учётных записей в рамках тестирования безопасности. Фреймворк позволяет легко создавать новые модули XML-файлы и ускорять процесс тестирования. Этот инструмент был создан с учётом двух основных...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

SSH-account-enumeration-verification-script

SSH-account-enumeration-verification-script Скрипт проверки перечисления учетных записей SSH CVE-2018-15473...

CVE-2026-100677

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

EUVD-2026-87650

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

CVE-2026-100677

Versions of stoatchat before 0.15.5 are vulnerable to an account enumeration vulnerability within the login endpoint. Unauthenticated attackers can distinguish between registered and unregistered email addresses by analyzing the error location fields returned during POST /api/auth/session/login r...

CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

PT-2026-99348

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description An account enumeration issue exists in the login endpoint. Unauthenticated attackers can identify whether an email address is registered by analyzing the error location fields returned in the...