345 matches found
CVE-2025-46047
CVE-2025-46047 Silverpeas -u 예시: python silverpeasenumpoc.py http://vulnerable-silverpeas.local -u admin 파일에서 사용자 이름 테스트: python silverpeasenumpoc.py -w 예시: python silverpeasenumpoc.py https://vulnerable-silverpeas.com -w users.txt 출력 스크립트는 다음을 출력합니다: + Username '...' appears VALID Status:...
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
CVE-2026-XXXX-atlassian-email-enumeration
CVE-2026-XXXX: Atlassian Central GraphQL — メール列挙オラクル 製品 Atlassian Central GraphQL Gateway (api.atlassian.com/graphql) 脆弱性タイプ CWE-204: Observable Response Discrepancy — メール列挙オラクル 深刻度 MEDIUM — CVSS 5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 説明 Atlassian の中央 GraphQL ゲートウェイ上の...
CVE-2025-65899
CVE-2025-65899: Kalmia CMS v0.2.0 - 観測可能なレスポンスの相違(Observable Response Discrepancy)に対して脆弱 脆弱性概要 CVE ID: CVE-2025-65899 製品: DifuseHQ Kalmia CMS 影響を受けるバージョン: 0.2.0 脆弱性タイプ: Observable Response Discrepancy(観測可能なレスポンスの相違) 必要な権限: なし 影響...
CVE-2026-86778
Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisoft Gym allows Account Footprinting. This issue affects Maksisoft Gym: from 0.5.10 before 0.5.11...
EUVD-2026-89948
Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc. Maksisoft Gym allows Account Footprinting. This issue affects Maksisoft Gym: from 0.5.10 before 0.5.11...
CVE-2026-84717: Observable Response Discrepancy
A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnostics:ping events after it has already looked up the target template, causing the endpoint to return HTTP 200 for a...
CVE-2026-9161
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
EUVD-2026-75404
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9161 User Enumeration in DernekPlus' Website Template
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9161 User Enumeration in DernekPlus' Website Template
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-9161
CVE-2026-9161 is an observable response discrepancy vulnerability in the DernekPlus Website Template that enables account footprinting (user enumeration). Affected versions are through 10092026 . The CVSS 3.1 score is 5.3 (MEDIUM) with a low confidentiality impact, as an unauthenticated network a...
CVE-2026-9161: Observable Response Discrepancy
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
PT-2026-89367
Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
Kibana 9.4.x < 9.4.4 Information Disclosure (ESA-2026-161)
The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-161 advisory. - Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for...
CVE-2026-19205
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...
CVE-2026-19205 User Enumeration in GastroMenum's GastroMenum Web Panel
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...
EUVD-2026-71214
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...
CVE-2026-19205 User Enumeration in GastroMenum's GastroMenum Web Panel
Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...
CVE-2026-19205
CVE-2026-19205 is a user enumeration vulnerability in the GastroMenum Web Panel , caused by an observable response discrepancy that allows account footprinting . The vulnerability is exploitable over the network with low complexity and no privileges required, yielding a CVSS 3.1 score of 7.5 (HIG...