105 matches found
CVE-2024-7478
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
EUVD-2024-55813
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
CVE-2024-7478
Multiple WSO2 products are vulnerable to username enumeration when configured to use an external user store . The system fails to sufficiently obscure the existence or validity of usernames during authentication attempts, allowing an attacker to query the mechanism repeatedly to discover valid ac...
CVE-2024-7478 Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
PT-2026-120603
When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism with different username guesses, enabli...
PT-2026-99288
Name of the Vulnerable Software and Affected Versions capgo.app affected versions not specified Description The application fails to validate that principals within channel permission overrides are members of the organization. This allows authenticated app or organization administrators to grant...
PaperCut NG/MF Unauthenticated RCE (CVE-2026-81578 + CVE-2026-82078)
This module exploits an authentication bypass in PaperCut NG and MF. A crafted Apache Tapestry complex-direct request invokes privileged ConfigEditor components through the public Home page. On version 26, the module reconfigures external user lookup to use an H2 JDBC URL whose initialization SQL...
PT-2026-59609
Summary A Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially...
Exploit for Incorrect Authorization in Pydio Cells
CVE-2023-32749 | Pydio Cells Unauthorised Role Assignment Exp...
CVE-2026-29134
SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions...
Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions
Product: Nuxt OG Image Version: 6.1.2 CWE-ID: CWE-404: Improper Resource Shutdown or Release Description: Failure to limit the length and width of the generated image results in a denial of service. Impact: Denial of service Exploitation condition: An external user Mitigation: Implement a...
GHSA-C7XP-Q6Q8-HG76 Nuxt OG Image is vulnerable to Denial of Service via unbounded image dimensions
Product: Nuxt OG Image Version: 6.1.2 CWE-ID: CWE-404: Improper Resource Shutdown or Release Description: Failure to limit the length and width of the generated image results in a denial of service. Impact: Denial of service Exploitation condition: An external user Mitigation: Implement a...
CVE-2025-41076
In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead of displaying a generic error message, the system exposes internal backend information, including the use of the Yii framework, the MySQL/MariaDB database...
EUVD-2017-5840
Malware in sbrugna...
EUVD-2017-6339
Malware in sbrugna...
EUVD-2007-4291
Malware in sbrugna...
EUVD-2019-5644
Malware in sbrugna...
EUVD-2024-48394
Malicious code in bioql PyPI...