CVE-2024-47059

CVE-2024-47059 describes a username enumeration issue in Mautic's login flow. When a user enters a correct username with a weak password, the system reveals a message about the weak password; with an incorrect username and a weak password, the response is generic “Invalid credentials.” This diffe...

in amirsanni/mini-inventory-and-sales-management-system

Description It is possible to enumerate registered emails using forgot password functionality as application is showing the different response when email exists and does not exists Proof of Concept Impact The product behaves differently or sends different responses under different circumstances i...

CVE-2006-0599

The 1 elog.c and 2 elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames...

CVE-2006-0599

Removed by vendor...