1199 matches found
echteeteepee
HTTP/1 反同步漏洞测试工具 本仓库包含用于检测 HTTP/1 请求走私（反同步）漏洞的防御性安全工具，其基础是 PortSwigger 的 James Kettle 所进行的开创性研究。 研究致谢 本作品直接受以下研究启发，并实现了其中的技术： 《HTTP/1 Must Die》 作者：James Kettle（PortSwigger 研究团队） 原始研究：https://portswigger.net/research/http1-must-die 研究员：James Kettle @albinowax 公司：PortSwigger Web Security...
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
CVE-2017-12635
CVE-2017-12635 CVE-2017-12635（Apache CouchDB 1.7.0 / 2.x ）或修改（PUT /users/org.couchdb.user:）他们拥有的文档。 每个 CouchDB 用户都以文档格式存储。这些文档包含几个必填字段，CouchDB 通过这些字段处理正确的身份验证过程。我们感兴趣的是 roles 字段。 roles 字段是用户角色列表。CouchDB 不提供任何内置角色，因此您可以根据需要自由定义自己的角色。但是，您不能在其中设置系统角色，例如 admin。此外，只有管理员才能为用户分配角色——默认情况下，所有用户都没有任何角色。 验证...
CVE-2021-45901
CVE-2021-45901 ServiceNow - ユーザ名列挙 PoCコード enumSNOWUsers.py - SNOW ユーザ列挙ツール タイトル ServiceNow アプリケーションで見つかったユーザ名列挙の脆弱性 公開: バージョン: 1.0 ベンダー: ServiceNow 製品: ServiceNow https://www.servicenow.com/ 影響を受けるバージョン: Orlando glide-orlando-12-11-2019patch5-06-17-2020 製品説明: ServiceNow...
CVE-2025-68621
CVE-2025-68621 — Ataque de temporización en Trilium Notes sobre /api/login/sync Gravedad: ALTA CVSS 7.4 Software afectado: TriliumNext/Trilium 0.101.0 Tipo de vulnerabilidad: CWE-208 – Discrepancia de temporización observable Corregido en: Trilium 0.101.0 PR 8129 Publicado: 2026-02-06 | Reservado...
CVE-2025-46047
CVE-2025-46047 Silverpeas -u 示例： python silverpeasenumpoc.py http://vulnerable-silverpeas.local -u admin 从文件测试用户名： root@kitploit: python silverpeasenumpoc.py -w 示例： python silverpeasenumpoc.py https://vulnerable-silverpeas.com -w users.txt 输出 脚本将输出： + 用户名 '...' 似乎有效（状态码: 200） 对于可能对应现有账户的用户名。 - 用户...
CVE-2026-64638
CVE-2026-64638 — XSS2Shell: XSS de preautenticación en la página de inicio de sesión de WordPress → RCE en el servidor Espejo de distribución de HackSpeak. Este repositorio es un espejo de distribución del PoC educativo XSS2Shell CVE-2026-64638 publicado por WordSec , con el código idéntico al...
CVE-2026-9161
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-75404
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9161
CVE-2026-9161 is an observable response discrepancy vulnerability in the DernekPlus Website Template that enables account footprinting (user enumeration). Affected versions are through 10092026 . The CVSS 3.1 score is 5.3 (MEDIUM) with a low confidentiality impact, as an unauthenticated network a...
CVE-2026-9161 User Enumeration in DernekPlus' Website Template
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2025-65899
CVE-2025-65899：Kalmia CMS v0.2.0 - 存在可观察响应差异漏洞 漏洞概述 CVE ID： CVE-2025-65899 产品： DifuseHQ Kalmia CMS 受影响版本： 0.2.0 漏洞类型： 可观察响应差异 所需权限： 无 影响 允许未经身份验证的攻击者枚举有效用户名，从而实施有针对性的密码喷洒、凭证填充和账户发现攻击。 修复版本 待维护者审批 - https://github.com/DifuseHQ/Kalmia/pull/34 描述 Kalmia CMS 0.2.0...
CVE-2026-87518
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prio...
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8...
CVE-2026-87478
Observable discrepancy in Autofill in Google Chrome prior to 153.0.801...
CVE-2026-87619
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.801...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36...
MiracleLinux 9 : pam-1.5.1-28.el9_8.1 (AXSA:2026-1797:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1797:03 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block direct...