CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - 用户信息泄露 本仓库包含针对 CVE-2026-53959 的概念验证（PoC）漏洞利用代码 免责声明 本项目仅供教育目的和授权安全测试使用。请勿将其用于你不拥有或无权限测试的系统。 概述 4gaBoards 是一个用于实时项目管理的看板系统。在 3.3.9 版本之前，4gaBoards 允许任何已认证用户通过 GET /api/users 枚举所有用户的账户信息，并通过 GET /api/users/:id 检索任意账户。users/index 和 users/show 操作仅依赖...

CVE-2026-84799

Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relation fields including author , authors , uploader , draftCreator , and revisionCreator . An attacker holding a scoped GraphQL token can query these relations to read the usernames, email addresses, and fu...

CVE-2023-6444-POC

CVE-202306444-POC 인증되지 않은 관리자 이메일 노출CVE-2023-6444에 대한 PoC 사용법: python3 cve-2023-6444.py $URL https://vulners.com/cvelist/CVELIST:CVE-2023-6444...

Whoisleak

Whoisleak 이 도구는 도메인을 등록한 이메일을 조회하고 해당 이메일이 데이터 유출에 노출되었는지 확인합니다. 설치 방법 root@kitploit: $ apt-get install nodejs-legacy $ pip install -r requirements.txt 사용 예 root@kitploit: python whoisleak.py -u securityattack.com.br 연락처 / 블로그 root@kitploit: Eddy Oliveira SecurityAttack...

CVE-2025-59843-CVE-2025-59932

CVE-2025-59843 & CVE-2025-59932 1. ユーザーメールアドレスの公開露出 CVE-2025-59843 対象 / 影響を受けるアプリケーション: FlagForge Web Application APIエンドポイント: /api/user/username 詳細: このエンドポイントは認証なしでユーザーのメールアドレスを返します。任意のユーザー名を公開クエリできます。 根本原因 / コード参照: root@kitploit: const user = await UserSchema.findOne name: $regex: new...

CVE-2023-5612

Tags RSS 피드에서 공개 이메일 노출 https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email...

ninja-forms-brute

Ninja Forms 3.6.8 - Offenlegung von E-Mail-Adressen ohne Authentifizierung Beschreibung Das Plugin löscht die temporären Dateien nicht, die beim Exportieren von Einsendungen erstellt werden, was es nicht authentifizierten Angreifern ermöglichen könnte, sie herunterzuladen und an sensible...

CVE-2026-77754 Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis

The Kirki WordPress plugin before 6.0.14 does not perform a capability check on some endpoints of one of its public AJAX actions, allowing unauthenticated users to retrieve the email addresses of registered users and comment authors, as well as non-public page content and settings...

CVE-2026-79660

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without...

CVE-2026-79660

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model . Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without any auth...

EUVD-2026-65454

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without...

CVE-2026-72915 Mastodon: Personally-identifying information disclosure due to incorrect access control validation

Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in app/controllers/admin/collectionscontroller.rb to access personally identifying information about another local user in...

CVE-2026-72760 cti-transmute Following List Exposes User Email Addresses to Authenticated Users

Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, getfollowing includes the followed user's email field in the API response alongside their name, user ID, and follow date. Becaus...

CVE-2026-72760

The CVE-2026-72760 issue affects MISP cti-transmute where the account following-list endpoint returns the followed user’s email field in get_following() in addition to name, user ID, and follow date. The root cause is that email is included in the API response despite not being required for follo...

CVE-2026-15958 Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-56570

Technical details about CVE-2026-56570 are not publicly provided in the connected documents. Monitor for updates; the available sources report exposure of usernames and emails but do not specify affected versions, vectors, or fixes.

CVE-2026-14931 JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

The JS Help Desk WordPress plugin before 3.1.4 grants a support-agent capability to the Contributor role on activation and does not perform a capability check on a user-listing handler, allowing Contributor-level users to enumerate the email addresses of all registered WordPress users...

CVE-2026-55496

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActive without adding a StatusActive predicate and serializes matches at RedactLevelUser, allowing any logged-in user to enumerate email addresses and profile metadata for inactive ...

CVE-2026-55496

Cloudreve prior to version 4.17.0 exposes email addresses and basic profile metadata for inactive/banned accounts via GET /api/v4/user/search. The underlying bug is that SearchActive does not apply a StatusActive predicate, unlike GetActiveByID/GetActiveByDavAccount, so results include inactive/b...

GHSA-HR66-5MQR-8MPX Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

Summary The Budibase Worker service exposes a public, unauthenticated API endpoint GET /api/global/users/tenant/:id that returns sensitive user information including tenantId, userId, email, and ssoId. The endpoint is registered in the PUBLICENDPOINTS list with a TODO comment acknowledging it...