CVE-2026-26744

CVE-2026-26744 Existe una vulnerabilidad de enumeración de usuarios en FormaLMS 4.1.18 y anteriores en la funcionalidad de recuperación de contraseña accesible a través del endpoint /lostpwd. La aplicación devuelve mensajes de error diferentes para nombres de usuario válidos e inválidos por...

CVE-2025-46047

CVE-2025-46047 Silverpeas -u 示例： python silverpeasenumpoc.py http://vulnerable-silverpeas.local -u admin 从文件测试用户名： root@kitploit: python silverpeasenumpoc.py -w 示例： python silverpeasenumpoc.py https://vulnerable-silverpeas.com -w users.txt 输出 脚本将输出： + 用户名 '...' 似乎有效（状态码: 200） 对于可能对应现有账户的用户名。 - 用户...

Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)

The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-161 advisory. - Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for...

CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2025-1101

A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...

EUVD-2024-37323

Malicious code in bioql PyPI...

EUVD-2024-39561

Malicious code in bioql PyPI...

EUVD-2025-23822

Malicious code in bioql PyPI...

EUVD-2025-2003

Malicious code in bioql PyPI...

CVE-2025-46390

CWE-204: Observable Response Discrepancy...

CVE-2025-1101

A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...

CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy

Loway - CWE-204: Observable Response Discrepancy...

CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy

Loway - CWE-204: Observable Response Discrepancy...

CVE-2024-38431

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38431

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38431 Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy

Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...

CVE-2024-38431

CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...

CVE-2023-37217

Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...

CVE-2023-37217

CVE-2023-37217 affects Tadiran Telecom Aeonix. The vulnerability is described as an observable response discrepancy (CWE-204) that can reveal differences in responses; a false comparison vulnerability is noted in external summaries (CNNVD/PT-2023-25835) as the underlying issue. CVSS data indicate...