WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API

The plugin does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users When the "Block access to users' data via REST API" settings is enabled...

WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API

The plugin does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users PoC When the "Block access to users' data via REST API" settings is enabled...

CVE-2022-40259, CVE-2022-40242, CVE-2022-2827 -- Vulnerabilities in AMI MegaRAC Baseboard Management Controller (BMC) software.(BSA-2022-2147)

Security Advisory ID: BSA-2022-2147 Component: BMC Software Revision: 1.0 Brocade PSIRT has become aware of several vulnerabilities discovered by Eclypsium Research affecting AMI MegaRAC Baseboard Management Controller BMC software. More information at:...

CVE-2022-2827

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827

AMI MegaRAC User Enumeration Vulnerability...

Code injection

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability

AMI MegaRAC User Enumeration Vulnerability...

CVE-2022-2827

CVE-2022-2827 is an AMI MegaRAC Baseboard Management Controller [BMC] vulnerability described as a User Enumeration vulnerability via the API. Connected sources confirm the issue affects AMI MegaRAC BMCs and that patches/updates have been released by OEMs; for example, NVIDIA’s DGX Station A100 l...

CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability

AMI MegaRAC User Enumeration Vulnerability...

Shenzhen Fujia Technology OurPhoto 安全漏洞

Shenzhen Fujia Technology OurPhoto is a cloud photo frame software from Shenzhen Fujia Technology, China. It allows you to share photos and video files directly on your cell phone. A security vulnerability exists in Shenzhen Fujia Technology OurPhoto version 1.4.1, which stems from an insecure...

CVE-2022-24187

The userid and deviceid on the Ourphoto App version 1.4.1 /device/ end-points both suffer from insecure direct object reference vulnerabilities. Other end-users userid and deviceid values can be enumerated by incrementing or decrementing id numbers. The impact of this vulnerability allows an...

CVE-2022-38755

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

Design/Logic Flaw

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

CVE-2022-38755

Vulnerability summary (CVE-2022-38755) : Micro Focus Filr versions prior to 4.3.1.1 are affected by a remote, unauthenticated user-enumeration flaw. Attackers can enumerate valid user accounts without authentication. The issue is confirmed across multiple sources (NVD/Red Hat/ CVE listings). Impa...

CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prio...

Micro Focus Filr 安全漏洞

Micro Focus Filr is an enterprise-grade file access and sharing solution from Micro Focus, a UK-based company. A security vulnerability exists in Micro Focus Filr versions prior to 4.3.1.1, which can be exploited by an attacker to enumerate valid users of the system...

CVE-2022-39307 Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password

Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the /api/user/password/sent-reset-email URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks...

CVE-2022-39307 Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password

Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the /api/user/password/sent-reset-email URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks...

User enumeration via forget password

Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a POST request is made to the /api/user/password/sent-reset-email URL. When the username or email does not exist, a JSON response contains a “user not found” message. This leaks...