28 matches found
CVE-2026-26744
CVE-2026-26744 توجد ثغرة في تعداد المستخدمين في FormaLMS الإصدار 4.1.18 وما دونه في وظيفة استعادة كلمة المرور التي يمكن الوصول إليها عبر نقطة النهاية /lostpwd. يُرجع التطبيق رسائل خطأ مختلفة لأسماء المستخدمين الصالحة وغير الصالحة على سبيل المثال، "اسم المستخدم الذي أدخلته غير موجود. يرجى التحقق...
CVE-2025-46047
CVE-2025-46047 Silverpeas = 6.4.2 تعداد أسماء المستخدمين PoC نص برمجي لبرهان المفهوم PoC لإظهار ثغرة تعداد أسماء المستخدمين في إصدارات Silverpeas 6.4.1 و6.4.2. تفاصيل الثغرة البرنامج المتأثر: Silverpeas الإصدارات المتأثرة: 6.4.1، 6.4.2 وربما إصدارات أقدم الإصدار المُصحَّح: 6.4.3 نوع الثغرة: تعداد...
Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)
The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-161 advisory. - Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for...
CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...
PT-2026-56099
Summary An unprotected user enumeration vulnerability exists in the account email update endpoint, allowing authenticated users to verify whether email addresses are registered on the panel through automated requests without rate limiting or CAPTCHA protection. Details The account settings page...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
EUVD-2024-37323
Malicious code in bioql PyPI...
EUVD-2024-39561
Malicious code in bioql PyPI...
EUVD-2025-2003
Malicious code in bioql PyPI...
EUVD-2025-23822
Malicious code in bioql PyPI...
CVE-2025-46390
CWE-204: Observable Response Discrepancy...
CVE-2025-1101
A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...