Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability, which stems from the discrepancy in error messages during the identity-first login process when organizations are enabled. This vulnerability could lead to user...

Directus 安全漏洞

Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 11.13.0 that stems from a REST API error message discrepancy that could lead to the disclosure of unauthorized...

EUVD-2013-0797

Malware in sbrugna...

CVE-2025-55630

The CVE-2025-55630 entry concerns Reolink Smart 2K+ Plug-in Wi‑Fi Video Doorbell with Chime, firmware 3.0.0.4662_2503122283. A discrepancy in the login error message when credentials are incorrect allows attackers to enumerate existing accounts. Public details across connected sources confirm the...

CVE-2024-44762

A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts...

pysrp 安全漏洞

pysrp is a Python implementation of the Secure Remote Cryptography Protocol SRP by the individual developer Tom Cocagne. A security vulnerability exists in pysrp versions prior to 1.0.16, which stems from the function calculatex in the file srp/ctsrp.py, which is manipulated to result in a messag...

CVE-2021-20376

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...