CVE-2021-33617

Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName= username enumeration, because the response to a failed login request is null only when the username is invalid...

EUVD-2025-15846

Malicious code in bioql PyPI...

CVE-2025-48015 Observable Response Discrepancy

Failed login response could be different depending on whether the username was local or central...