pritunl-CVE-2020-25200

CVE-2020-25200 Pritunl VPN 서버 - 영향을 받는 버전: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25은 일련의 /auth/session 로그인 시도를 통해 공격자가 유효한 VPN 사용자 이름을 열거할 수 있게 합니다. 처음에는 서버가 401 오류를 반환합니다. 그러나 사용자 이름이 유효하다면 20번의 로그인 시도 후 서버는 400 오류를 반환하기 시작합니다. 유효하지 않은 사용자 이름은 무기한 401 오류를 받게 됩니...

CVE-2026-34833

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previously included the user's plaintext password in the JSON response. This exposed credentials to browser logs, local caches, and network proxie. This issue has...

CVE-2026-34833

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previously included the user's plaintext password in the JSON response. This exposed credentials to browser logs, local caches, and network proxie. This issue has...

CVE-2026-34833

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previously included the user's plaintext password in the JSON response. This exposed credentials to browser logs, local caches, and network proxie. This issue has...

EUVD-2026-18530

Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to version 1.4.10, the GET /api/auth/session endpoint previously included the user's plaintext password in the JSON response. This exposed credentials to browser logs, local caches, and network proxie. This issue has...