EUVD-2025-16124

Malicious code in bioql PyPI...

EUVD-2023-27549

Malicious code in bioql PyPI...

CVE-2025-9109

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

CVE-2025-9109

CVE-2025-9109 affects Portabilis i-Diario up to version 1.5.0, specifically the Password Recovery Endpoint at /password/email. The issue is a discrepancy in responses that can be exploited remotely, with high complexity, and an exploit has been publicly released. Multiple connected sources corrob...

CVE-2025-9109 Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

CVE-2025-9109: Observable Response Discrepancy

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the...

CVE-2025-46390

CWE-204: Observable Response Discrepancy...

CVE-2025-46390

Technical details for CVE-2025-46390 are not publicly available in the provided documents. No specific affected product/version, root cause, impact, or fix is listed here; monitor for updates.

CVE-2025-46390

CWE-204: Observable Response Discrepancy...

CVE-2025-46390

CWE-204: Observable Response Discrepancy...

CVE-2025-46390: Observable Response Discrepancy

CWE-204: Observable Response Discrepancy...

CVE-2025-27451: Observable Response Discrepancy

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

CVE-2025-3092 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint...

CVE-2025-5485: Observable Response Discrepancy

User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequenc...

CVE-2025-49187: Observable Response Discrepancy

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

CVE-2025-0163

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...

CVE-2025-0163 IBM Security Verify Access information disclosure

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...

CVE-2025-0163 IBM Security Verify Access information disclosure

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...

CVE-2025-0163: Observable Response Discrepancy

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...