3984 matches found
VMware Harbor User Enumeration (CVE-2020-13794)
Binary data vmwareharborCVE-2020-13794direct.nbin...
CVE-2017-16629
In SapphireIMS 40971, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For...
CVE-2017-16629
SapphireIMS 4097_1 is affected by a username-enumeration issue. The login form reveals different error messages for incorrect user vs. incorrect password, enabling an attacker to guess registered usernames. The CVE description specifies two messages: “The application failed to identify the user. ...
Exploit for SQL Injection in Agentejo Cockpit
Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848...
PT-2021-3778
Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Access and Identity Manager affected versions not specified Description The issue is related to the unintentional provision of a login interface on port 7443, which may allow a malicious actor with network access to attemp...
CVE-2021-33321
Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true...
CVE-2021-34575
In MB connect line mymbCONNECT24, mbCONNECT24 in versions = 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends...
Design/Logic Flaw
In MB connect line mymbCONNECT24, mbCONNECT24 in versions = 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends...
CVE-2021-34575
CVE-2021-34575 affects MB connect line products MB CONNECT LINE / mbCONNECT24 up to version 2.8.0. Affected component is the mymbCONNECT24/mbCONNECT24 service, where an unauthenticated attacker can enumerate valid users by observing server response differences. The root cause is an information-di...
PT-2021-20557
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions = 2.8.0 Description: The issue allows an unauthenticated user to enumerate valid users by analyzing the server's response. This can be done by checking the kind of response the server sends, potentially revealing sensitiv...
CVE-2021-34575: Observable Discrepancy
In MB connect line mymbCONNECT24, mbCONNECT24 in versions = 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends...
CVE-2021-33617
Affected software: Zoho ManageEngine Password Manager Pro. Vulnerability: username enumeration through AjaxResponse.jsp?RequestType=GetUserDomainName&userName= occurs because a failed login response is null only when the username is invalid. Impact: information disclosure via login behavior. Root...
TeamsUserEnum - User Enumeration With Microsoft Teams API
Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage Microsoft Teams with the search features. This tool validates an email address or a list of...
CVE-2021-26081
REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Exposure vulnerability in the /rest/api/latest/user/avatar/temporary endpoint...
User Enumeration
Overview Affected versions of this package are vulnerable to User Enumeration. In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attac...
DALIM SOFTWARE Es User Enumeration
A vulnerability exists in DALIM SOFTWARE. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration Exploit
Exploit Title: Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration Exploit Author: Ricardo Ruiz @ricardojoserf CVE: CVE-2021-31159 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31159 Vendor Homepage: https://www.manageengine.com Vendor Confirmation:...
Zoho ManageEngine ServiceDesk Plus 9.4 User Enumeration
Exploit Title: Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration CVE-2021-31159 Date: 17/06/2021 Exploit Author: Ricardo Ruiz @ricardojoserf CVE: CVE-2021-31159 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31159 Vendor Homepage: https://www.manageengine.com...
Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration
Exploit Title: Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration Date: 17/06/2021 Exploit Author: Ricardo Ruiz @ricardojoserf CVE: CVE-2021-31159 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31159 Vendor Homepage: https://www.manageengine.com Vendor Confirmation:...
