CVE-2017-5487

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

Stop User Enumeration WordPress plugin - Authentication Bypass

Stop User Enumeration WordPress plugin 1.7.3 contains an authentication bypass caused by URL-encoding the REST API path /wp-json/wp/v2/users/, letting attackers bypass user enumeration restrictions, exploit requires crafted URL encoding. id: CVE-2025-4302 info: name: Stop User Enumeration WordPre...

LiquidFiles < 4.2 - User Enumeration via Password Reset

LiquidFiles filetransfer server before 4.2 contains a user enumeration vulnerability caused by distinguishable responses in password reset functionality, letting unauthenticated attackers enumerate valid user accounts, exploit requires no authentication. id: CVE-2025-56132 info: name: LiquidFiles...

Dify User Enumeration via Observable Response Discrepancy

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...

NocoDB - User Enumeration

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3. id: CVE-2026-28358 info: name: NocoDB -...

iTop - User Enumeration via REST Endpoint

From the webservices/rest.php file, several operations are accessible from an unauthenticated user. One of them is doresetpwd, allowing to reset a user password. This feature can be abused to perform user enumeration when a non-existent user is provided. id: CVE-2024-51739 info: name: iTop - User...

Piwigo - User Enumeration via Password Reset

Piwigo is an open source photo gallery application for the web. In version 15.5.0 and likely earlier 15.x releases, the password reset functionality in Piwigo allows an unauthenticated attacker to determine whether a given username or email address exists in the system. The endpoint at...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

CVE-2024-39211

CVE-2024-39211 Kaiten 用户枚举 Kaiten —— 一个工作流管理系统，容易受到通过简单 POST 请求对系统中注册的用户登录名和电子邮件地址进行无限制暴力破解攻击的影响。 参考资料： CVE MITRE 描述 NVD CVE 使用方法 简单下载 bash 脚本并使用自定义字典运行 仅登录名，不包括电子邮件！ root@kitploit: bash CVE-2024-39211.sh 结果如下： 字典 公司通常使用基于名和姓组合的登录策略，例如 Anton Ivanov = aivanov 或 aivanov。因此，以下提供了大量俄语名字和姓氏的链接： 俄语常见名字...

CVE-2020-35847_CVE-2020-35848

Cockpit CMS NoSQL注入（CVE-2020-35847，CVE-2020-35848） Cockpit CMS 0.11.2之前版本在 /auth/resetpassword 和 /auth/newpassword 接口中存在NoSQL注入漏洞，可导致密码重置令牌泄露，进而实现用户信息枚举及密码重置。 阅读更多 - https://swarm.ptsecurity.com/rce-cockpit-cms/ 此Python脚本用于枚举系统用户并重置密码。 使用方法 root@kitploit: python3 exploit.py -u...

Ghost CMS - User Enumeration

Ghost CMS 5.9.4 contains a user enumeration vulnerability in the login functionality. The application reveals whether a user account exists through different error messages, allowing attackers to enumerate valid user accounts via specially-crafted HTTP requests. id: CVE-2022-41697 info: name: Gho...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

Thinfinity VirtualUI User Enumeration

Thinfinity VirtualUI before v3.0, /changePassword returns different responses for requests depending on whether the username exists. It may enumerate OS users Administrator, Guest, etc. id: CVE-2021-44848 info: name: Thinfinity VirtualUI User Enumeration author: danielmofer severity: medium...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Uso: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Derechos de autor: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

CVE-2018-15131

Script de Enumeración de Usuarios de Zimbra Collaboration CVE-2018-15131 Cómo usar El argumento --host debe ser el nombre de host o dirección IP de la página raíz de la aplicación web de Zimbra Collaboration, y --userlist una lista de nombres de usuario para verificar contra ella. root@kitploit:...

CVE-2023-23752

Exploit de Divulgación de Información No Autenticada en Joomla CVE-2023-23752 Exploit Descripción Este repositorio contiene un exploit para una vulnerabilidad denominada "Divulgación de Información No Autenticada en Joomla" CVE-2023-23752. Tenga en cuenta que esto es simplemente un script de prue...