Design/Logic Flaw

A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigger this vulnerability...

PT-2022-7088

Name of the Vulnerable Software and Affected Versions Ghost Foundation Ghost version 5.9.4 Description A user enumeration issue exists in the login functionality, allowing a remote attacker to disclose sensitive information using a specially-crafted HTTP request. This can be triggered by sending ...

Ghost user enumeration vulnerablity

Talos Vulnerability Report TALOS-2022-1625 Ghost user enumeration vulnerablity December 21, 2022 CVE Number CVE-2022-41697 SUMMARY A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of...

WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API

The plugin does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users PoC When the "Block access to users' data via REST API" settings is enabled...

WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API

The plugin does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users When the "Block access to users' data via REST API" settings is enabled...

CVE-2022-40259, CVE-2022-40242, CVE-2022-2827 -- Vulnerabilities in AMI MegaRAC Baseboard Management Controller (BMC) software.(BSA-2022-2147)

Security Advisory ID: BSA-2022-2147 Component: BMC Software Revision: 1.0 Brocade PSIRT has become aware of several vulnerabilities discovered by Eclypsium Research affecting AMI MegaRAC Baseboard Management Controller BMC software. More information at:...

CVE-2022-2827

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827

AMI MegaRAC User Enumeration Vulnerability...

Code injection

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827

CVE-2022-2827 is an AMI MegaRAC Baseboard Management Controller [BMC] vulnerability described as a User Enumeration vulnerability via the API. Connected sources confirm the issue affects AMI MegaRAC BMCs and that patches/updates have been released by OEMs; for example, NVIDIA’s DGX Station A100 l...

CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-24187

The userid and deviceid on the Ourphoto App version 1.4.1 /device/ end-points both suffer from insecure direct object reference vulnerabilities. Other end-users userid and deviceid values can be enumerated by incrementing or decrementing id numbers. The impact of this vulnerability allows an...

Shenzhen Fujia Technology OurPhoto 安全漏洞

Shenzhen Fujia Technology OurPhoto is a cloud photo frame software from Shenzhen Fujia Technology, China. It allows you to share photos and video files directly on your cell phone. A security vulnerability exists in Shenzhen Fujia Technology OurPhoto version 1.4.1, which stems from an insecure...

CVE-2022-38755

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

Design/Logic Flaw

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

CVE-2022-38755

Vulnerability summary (CVE-2022-38755) : Micro Focus Filr versions prior to 4.3.1.1 are affected by a remote, unauthenticated user-enumeration flaw. Attackers can enumerate valid user accounts without authentication. The issue is confirmed across multiple sources (NVD/Red Hat/ CVE listings). Impa...

Micro Focus Filr 安全漏洞

Micro Focus Filr is an enterprise-grade file access and sharing solution from Micro Focus, a UK-based company. A security vulnerability exists in Micro Focus Filr versions prior to 4.3.1.1, which can be exploited by an attacker to enumerate valid users of the system...