Lucene search
+L

17 matches found

NVD
NVD
•added 2026/10/19 4:17 p.m.•10 views

CVE-2026-111056

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted ema...

6.9CVSS0.00285EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/19 4:00 p.m.•8 views

EUVD-2026-104418

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted ema...

6.9CVSS6AI score0.00285EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/19 4:00 p.m.•13 views

CVE-2026-111056 FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted ema...

6.9CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/19 4:00 p.m.•41 views

CVE-2026-111056 FOSSBilling: Unauthenticated client account enumeration via guest signup endpoint

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted ema...

6.9CVSS0.00285EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/19 4:00 p.m.•15 views

CVE-2026-111056

The FOSSBilling open-source billing platform is vulnerable to unauthenticated client account enumeration in versions 0.1.0 through 0.8.7 . The issue exists in the POST /api/guest/client/create endpoint, where the Box Mod Client Api Guest::create method returns an unredacted error message when Cli...

6.9CVSS5.9AI score0.00285EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•11 views

CVE-2026-111056: Exposure of Sensitive Information to an Unauthorized Actor

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted email belongs to a registered client because guest signup returns a distinct unredacted error when the submitted ema...

6.9CVSS6AI score0.00285EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•24 views

PT-2026-117479

Name of the Vulnerable Software and Affected Versions FOSSBilling versions 0.1.0 through 0.8.6 Description The unauthenticated endpoint "/api/guest/client/create" reveals whether a submitted email belongs to a registered client. This occurs because the guest signup process returns a distinct,...

6.9CVSS5.9AI score0.00285EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/10/18 4:00 p.m.•10 views

FossBilling information leakage vulnerability

FossBilling versions from 0.1.0 to 0.8.7 have security vulnerabilities. This vulnerability stems from the unauthenticated POST /api/guest/client/create endpoint returning unmasked error messages for existing email addresses. This could allow attackers to submit a target email address and compare...

6.9CVSS5.8AI score0.00285EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2017-14322

Malware in sbrugna...

5.5CVSS5.8AI score0.00836EPSS
SaveExploits0References3
zdt
zdt
•added 2017/03/25 12:00 a.m.•67 views

VMware Host Guest Client Redirector - DLL Side Loading Exploit

Exploit for windows platform in category local exploits require 'msf/core' class MetasploitModule 'DLL Side Loading Vulnerability in VMware Host Guest Client Redirector', 'Description' = %q A DLL side loading vulnerability was found in the VMware Host Guest Client Redirector, a component of VMwar...

4.4CVSS7.4AI score0.1802EPSS
SaveExploits5
NVD
NVD
•added 2017/01/09 8:59 a.m.•33 views

CVE-2017-5216

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed...

5.5CVSS5.7AI score0.00836EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2017/01/09 8:59 a.m.•22 views

CVE-2017-5216

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed...

5.5CVSS6.1AI score0.00836EPSS
SaveExploits0References2
Prion
Prion
•added 2017/01/09 8:59 a.m.•22 views

Stack overflow

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed...

4.3CVSS5.7AI score0.00836EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/01/09 8:48 a.m.•31 views

CVE-2017-5216

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed...

5.7AI score0.00836EPSS
SaveExploits0References2
CVE
CVE
•added 2017/01/09 8:48 a.m.•75 views

CVE-2017-5216

CVE-2017-5216: A stack-based buffer overflow in Netop Remote Control affects versions 11.53, 12.21 and earlier. The overflow occurs in the Guest client’s Import to Phonebook function when loading a specially crafted file with special characters. Version 12.51 is the fixed release. No exploitation...

5.5CVSS5.7AI score0.00836EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2017/01/09 12:00 a.m.•7 views

PT-2017-16397

Name of the Vulnerable Software and Affected Versions Netop Remote Control versions prior to 12.51 Description A stack-based buffer overflow issue occurs in the "Import to Phonebook" option of the Guest client when a malicious file with special characters is loaded. Recommendations For versions...

5.5CVSS0.00836EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/09 12:00 a.m.•11 views

CVE-2017-5216: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior. The affected module in the Guest client is the "Import to Phonebook" option. When a specially designed malicious file containing special characters is loaded, the overflow occurs. 12.51 is the fixed...

5.5CVSS6.1AI score0.00836EPSS
SaveExploits0References2
Rows per page
Query Builder