CVE-2025-58586

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

CVE-2025-58586

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...

EUVD-2025-31613

Malicious code in bioql PyPI...

EUVD-2025-31223

Malicious code in bioql PyPI...

EUVD-2025-25600

Malicious code in bioql PyPI...

EUVD-2025-32058

Malicious code in bioql PyPI...

EUVD-2025-32131

Malicious code in bioql PyPI...

CVE-2025-59741

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'...

CVE-2025-59741 Multiple vulnerabilities in AndSoft's e-TMS

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'...

CVE-2025-59741 Multiple vulnerabilities in AndSoft's e-TMS

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/CLT/LOGINERRORFRM.ASP'...

CVE-2025-61583

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostname...

CVE-2025-61583

CVE-2025-61583 affects TS3 Manager (Teamspeak3 web interface). The Red Hat/NVD entries describe a reflected cross-site scripting (XSS) vulnerability in the login page error handling, where unsanitized server hostnames can trigger script execution in the victim’s browser context. Affected versions...

CVE-2025-61583 TS3 Manager is vulnerable to unauthenticated reflected XSS attack due to insecure error handling

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostname...

CVE-2025-61583 TS3 Manager is vulnerable to unauthenticated reflected XSS attack due to insecure error handling

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostname...

ts3-manager 安全漏洞

ts3-manager is a web interface for maintaining the Teamspeak3 server by Jonathan Personal Developer. A security vulnerability exists in ts3-manager version 2.2.1 and earlier, which stems from a login page error handling mechanism that does not properly clean up malicious scripts embedded in the...

PT-2025-40307

Name of the Vulnerable Software and Affected Versions TS3 Manager versions prior to 2.2.2 Description TS3 Manager, a web interface for Teamspeak3 servers, contains a reflected cross-site scripting issue. The problem resides in the login page's error handling, specifically when processing server...

CVE-2025-56764

Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...

CVE-2025-56764

Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...

Trivision NC-227WF 安全漏洞

Trivision NC-227WF is a webcam from Trivision USA. A security vulnerability exists in Trivision NC-227WF version 5.80, which stems from a login mechanism that returns a different error message, potentially leading to username enumeration...