3985 matches found
Exploit for Injection in Apache Archiva
CVE-2020-9495 PoC CVE-2020-9495 is medium severity LDAP injec...
CVE-2020-11625
The AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and AvertX Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438 are vulnerable to username enumeration via the web UI. The ISAPI/Security/sessionLogin/capabilities endpoint returns a salt value for existing usernames ...
TYPO3 10.4.x < 10.4.2 Information Disclosure (TYPO3-CORE-SA-2020-001)
The version of TYPO3 installed on the remote host is 10.4.x prior to 10.4.2. It is, therefore, affected by an information disclosure vulnerability in its password reset component due to a failure to defend against time-based attacks. An unauthenticated, remote attacker can exploit this, to...
Responsive Online Blog 1.0 SQL Injection
Exploit Title: Responsive Online Blog 1.0 - 'single.php?id=' SQL Injection Date: 2020-07-03 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
CVE-2020-15392
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
CVE-2020-15392
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
Design/Logic Flaw
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
CVE-2020-15392
CVE-2020-15392 — A user enumeration vulnerability in Venki Supravizio BPM 10.1.2 is triggered during password recovery. The issue arises from differing error messages that let an attacker determine whether a username exists, enabling brute-force use of valid usernames. Connected documents corrobo...
PT-2020-14405
Name of the Vulnerable Software and Affected Versions Venki Supravizio BPM version 10.1.2 Description A user enumeration flaw was found in the password recovery process. This issue allows an attacker to determine if a username is valid or not by analyzing the difference in error messages, enablin...
CVE-2020-15392: Observable Discrepancy
A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
Naviwebs Navigate CMS Authorization Issues Vulnerability
Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. A security vulnerability exists in the password recovery feature in Naviwebs Navigate CMS version 2.9 r1433, which originates from a notfound message being returned when the user name o...
CVE-2020-14016
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
CVE-2020-14016
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
Default credentials
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
CVE-2020-14016
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
CVE-2020-14016
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
CVE-2020-14016
CVE-2020-14016 affects Navigate CMS 2.9 r1433. The forgot-password feature allows password reset via username or email; the system returns a not_found message when no matching user exists, enabling user enumeration. This is the underlying issue; explicit exploitation details or in-the-wild activi...
CVE-2020-14016: Weak Password Recovery Mechanism for Forgotten Password
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a notfound message when the provided username or email address does...
PT-2020-13842
Name of the Vulnerable Software and Affected Versions Navigate CMS version 2.9 r1433 Description An issue in the forgot-password feature of Navigate CMS allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature...
CVE-2020-13998
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...