21 matches found
CVE-2025-9522
Blind Server-Side Request Forgery SSRF in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information...
CVE-2025-9522
Blind Server-Side Request Forgery SSRF in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information...
EUVD-2025-206347
Blind Server-Side Request Forgery SSRF in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information...
CVE-2025-9522
Technical details about CVE-2025-9522 are not publicly provided in the supplied documents; no affected versions or remediation are disclosed. Monitor for updates.
EUVD-2019-10961
Malware in sbrugna...
Innovaphone PBX Security Breach
Innovaphone PBX is an advanced and modern IP phone system from Innovaphone. A security vulnerability exists in Innovaphone PBX versions prior to 14r1, which stems from a vulnerability that allows an attacker to enumerate discrepant information in a response...
Apepe - Enumerate Information From An App Based On The APK File
Apepe is a Python tool developed to help pentesters and red teamers to easily get information from the target app. This tool will extract basic informations as the package name, if the app is signed and the development language... Installing / Getting started A quick guide of how to install and u...
Authorization
The usertoken authorization header on the Ourphoto App version 1.4.1 /apiv1/ end-points is not implemented properly. Removing the value causes all requests to succeed, bypassing authorization and session management. The impact of this vulnerability allows an attacker POST api calls with other use...
NTLMRecon - A Tool To Enumerate Information From NTLM Authentication Enabled Web Endpoints
A fast and flexible NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an...
CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...
Improper authentication on Convert Sub-Task to Issue page - CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names Project Key, if it is part of the workflow name Issue Keys Issue Types Status...
Improper authentication on Convert Sub-Task to Issue page - CVE-2019-20412
The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names Project Key, if it is part of the workflow name Issue Keys Issue Types Status...
NTLMRecon - A Tool To Enumerate Information From NTLM Authentication Enabled Web Endpoints
Note that the tool is still under development. Things may break anytime - hence, beta! A fast and flexible NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is...
Code injection
The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the csemployerajaxprofile function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users...
CVE-2018-1219
EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this informati...
enum4linux - Tool for Enumerating Information from Windows and Samba Systems
A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It is written in Perl and is basically a wrapper around the Samba tools smbclient, rpclient, net and nmblookup. Key features RID...
TP-Link Print Server TL PS110U - Sensitive Information Enumeration
No description provided by source. Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U TP-Link TL PS110U Print Server runs...
TP-Link Print Server TL PS110U Information Enumeration
Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U TP-Link TL PS110U Print Server runs telnet service which enables an...
System Information Enumeration (via DMI)
Using the SMBIOS aka DMI interface, it was possible to retrieve information about the remote system's hardware, such as its product name and serial number. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35351; scriptversion"1.12";...
Netware LDAP search request
The server SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.12104";...