14660 matches found
CVE-2025-58579 Username Disclosure Through Missing Authentication
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-58590 Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...
CVE-2025-58586
CVE-2025-58586 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from distinct error messages for login failures (incorrect password vs. non-existent username), enabling attacker-driven username enumeration. Reported impact: information disclosure (us...
CVE-2025-58586
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58583 User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled...
CVE-2025-58583 User Enumeration
The application provides access to a login protected H2 database for caching purposes. The username is prefilled...
CVE-2025-58583
CVE-2025-58583 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from a login-protected H2 database used for caching where the username is prefilled, potentially enabling unauthorized access to the system. The available connected documents describe th...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a lack of authentication and could lead to a user enumeration attack...
CVE-2025-58579: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
PT-2025-40859
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description An absence of authentication allows unauthenticated users to request data from an endpoint, leading to potential user enumeration. The application is susceptible to user enumeration due to this lack ...
CVE-2025-58586: Observable Response Discrepancy
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
PT-2025-40866
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The application reveals whether a username exists during failed login attempts by returning different error messages for incorrect passwords versus non-existent usernames. This enables an attacker to...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...
Exploit for CVE-2025-56132
CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerab...
EUVD-2024-45831
Malicious code in bioql PyPI...
EUVD-2025-12365
Malicious code in bioql PyPI...