3392 matches found
Oracle E-Business Suite - Database user enumeration vulnerability
Application: E-Business Suite Vendor URL: Oracle Bugs: User enumeration Reported: 17.07.2015 Vendor response: 24.07.2015 Date of Public Advisory:20.10.2015 Reference: Oracle CPU Oct 2015 Authors: Nikita Kelesis, Ivan Chalykin, Alexey Tyurin, Egor Karbutov ERPScan VULNERABILITY INFORMATION Class:...
Cisco WebEx Meeting Center Web-Based Administrative Interface User Enumeration Vulnerability
A vulnerability in the web-based administrative interface of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to enumerate valid usernames and determine if the usernames have administrative privileges. The vulnerability is due to a logic error in the handling of invalid...
WordPress Stop User Enumeration Plugin <= 1.2.4 - BYPASS
An attacker can bypass the username enumeration protection by using POST requests. Solution Upgrade the plugin...
F5 BIG-IQ Enumeration of users and Information Disclosure
Hi, I'm testing BIG-IQ v 0.0.7028, no the last HF but i don't see the bug fix in the HF1 the new mngmt of F5 BIG-IP, i see that you are loggout and join to the next link LINK : where $user is the user https://127.0.0.1/mgmt/shared/authz/users/$user/ When i open this link and try some diff users...
BIG-IQ 0.0.7028 Information Disclosure
Hi, I'm testing BIG-IQ v 0.0.7028, no the last HF but i don't see the bug fix in the HF1 the new mngmt of F5 BIG-IP, i see that you are loggout and join to the next link LINK : where $user is the user https://127.0.0.1/mgmt/shared/authz/users/$user/ When i open this link and try some diff users...
CVE-2015-2762
Websense TRITON AP-WEB before 8.0.0 allows remote attackers to enumerate Windows domain user accounts via vectors related to HTTP authentication...
GitLab Login Utility
This module attempts to login to a GitLab instance using a specific user/pass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/credentialcollection' require...
IBM Rational ClearQuest 7.1.x < 7.1.2.15 / 8.0.0.x < 8.0.0.12 / 8.0.1.x < 8.0.1.5 Multiple Vulnerabilities (credentialed check)
The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.15 / 8.0.0.x prior to 8.0.0.12 / 8.0.1.x prior to 8.0.1.5 installed. It is, therefore, potentially affected by multiple vulnerabilities : - A security bypass vulnerability exists due to an error in the login form which...
Yelp: Information disclosure - emails disclosed in response > staging.seatme.us
Hello, I found a info disclosure vulnerability. We can enumerate emails via userid parameter from Manage users. And I found that : ID 1 is ██████ ID 514755 is ████████ ID 514775 is █████ ID 514764 is ███████ I attached photos from burp repeater to be more explicit. We can easily bruteforce userid...
Mobile Vikings: Username and sim id enum
Look at this url GET request https://mobilevikings.be/en/sims/authorization/remove/admin/1036358/ - looks good - admin user detected https://mobilevikings.be/en/sims/authorization/remove/lloyd/1036358/ - looks good - lloyd user detected...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the Forgot Password process of the Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate a valid administrator account. The vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by submitting...
ManageEngine ServiceDesk Plus 'search' Parameter User Enumeration Vulnerability
ServiceDesk Plus is web-based helpdesk software that helps users manage all their communications from a single point. A user enumeration vulnerability exists in the ManageEngine ServiceDesk Plus 'search' parameter, which can be exploited by an attacker to obtain a valid user account via a brute...
REWTERZ-20140102 - ManageEngine ServiceDesk Plus User Enumeration Vulnerability
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
ManageEngine ServiceDesk 9.0 User Enumeration Vulnerability
ManageEngine ServiceDesk version 9.0 prior to build 9031 suffers from a remote user enumeration vulnerability. Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk Plus http://www.manageengine.com/ Affected Version: 9.0 Other versions could also be affected Fix...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to enumerate valid user accounts. The vulnerability is due to improper sanitization of a returned message. An attacker could exploit this vulnerability by sending crafted URL reques...
ManageEngine ServiceDesk 9.0 User Enumeration
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plus User Enumeration Vulnerability Product: ServiceDesk...
ManageEngine ServiceDesk Plus 9.0 - User Enumeration
ManageEngine ServiceDesk Plus 9.0 - User Enumeration ================================================================================ REWTERZ-20140102 - Rewterz - Security Advisory ================================================================================ Title: ManageEngine ServiceDesk Plu...
Cisco WebEx Meetings Server User Enumeration Vulnerability
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to guess valid user accounts on the targeted system. The vulnerability exists because the affected software fails to refresh the CAPTCHA on the login page. An attacker could exploit this vulnerability b...
Wordpress Photo Gallery Unauthenticated SQL Injection User Enumeration Exploit
This Metasploit module exploits an unauthenticated SQL injection in order to enumerate the Wordpress users tables, including password hashes. This Metasploit module was tested against version 1.2.7. This module requires Metasploit: http://metasploit.com/download Current source:...