CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing. See the full write-up at the Bishop Fox blog, including a complete walkthrough of the methodology behind this tool. Description CVE-2023-27997 ...

GO-2026-6619 Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer

Portainer CE allows username enumeration through authentication response timing in github.com/portainer/portainer...

CVE-2023-30458

CVE-2023-30458 Exploit Title: Medicine Tracker System 1.0 - Observable Discrepancy: Username enumeration via response timing Date: April, 22 2023 Exploit Author: William David Mathisen d34dun1c02n Vendor Homepage:...

CVE-2026-77987

A server-side request forgery SSRF vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other port...

CVE-2026-77987 GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

A server-side request forgery SSRF vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other port...

EUVD-2026-84872

A server-side request forgery SSRF vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme and host of a user-supplied URL but did not validate the port, allowing requests to be directed to internal services listening on other port...

CVE-2026-77987

A server-side request forgery (SSRF) vulnerability exists in the notebook viewer of GitHub Enterprise Server (versions 3.17 through 3.22). The root cause is the failure to validate the port of user-supplied URLs, despite validating the scheme and host. This allows requests to internal services on...

PT-2026-97052

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions 3.17 through 3.22 Description A server-side request forgery SSRF issue exists in the notebook viewer. While the system validates the scheme and host of a user-supplied URL, it fails to validate the port. This...

CVE-2026-66002

Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request-data web form and PersonalDataDownloadRequest class in frappe/website/doctype/personaldatadownloadrequest/personaldatadownloadrequest.py return distinguishable response shapes for registered and...

Open WebUI: Account enumeration via observable login timing discrepancy

Summary The /api/v1/auths/signin endpoint leaked whether an email address belonged to a registered account through a response-time side channel. Password verification ran bcrypt only when the email was found in the database; for a non-existent email the request returned early without hashing. The...

CVE-2025-3716

User enumeration in ESET Protect on-prem via Response Timing...

EUVD-2025-209122

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2025-3716

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2025-3716

CVE-2025-3716 affects ESET Protect (on-prem). The issue is user enumeration via response timing, exposing authentication-related information. According to the connected documents, CVSS 4.0 base factors yield a 5.3 (Medium) overall score with Adjacent attack vector, Low attack complexity, and no p...

CVE-2025-3716

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2025-3716 User enumeration in ESET Protect (on-prem)

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2025-3716 User enumeration in ESET Protect (on-prem)

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2025-3716: Observable Response Discrepancy

User enumeration in ESET Protect on-prem via Response Timing...

PT-2026-28804

User enumeration in ESET Protect on-prem via Response Timing...

CVE-2026-27480

Static Web Server SWS is a production-ready web server suitable for static web files or assets. In versions 2.1.0 through 2.40.1, a timing-based username enumeration vulnerability in Basic Authentication allows attackers to identify valid users by exploiting early responses for invalid usernames,...