3430 matches found
Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory
Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumeration In Active Directory Date: 2024-10-04 Exploit Author: Elizeu Das Dores ELIZEUOPAIN Vendor Homepage: https://netadmin.software/ Version: 3.5 Tested on: 20224-10-05 CVE : CVE-2024-9513 References:...
CVE-2018-10949
Zimbra Collaboration User Enumeration Script CVE-2018-10949 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kitploit: root@kali ./cve-2018-10949-user-enum.py --host...
Synology-DiskStation-User-Enumeration-CVE-2017-9554-
Synology DiskStation User Enumeration CVE-2017-9554 Basic script to enumerate valid users on Synology DiskStation v6.1.3-15152...
CVE-2025-51586-PrestaShop-PoC
CVE-2025-51586 - PrestaShop AdminLogin 电子邮件枚举 PoC 📌 概述 本仓库包含针对漏洞 CVE-2025-51586 的符合道德规范的 PoC（概念验证） ，影响 PrestaShop 版本 1.7.x — 8.2.2 。 该 PoC 通过后台密码重置机制（AdminLogin 控制器）枚举管理员电子邮件地址。 📝 漏洞摘要 PrestaShop 1.7 至 8.2.2 版本中 AdminLogin 控制器的用户枚举漏洞允许远程攻击者通过操控 idemployee 和 resettoken 参数获取管理员的用户电子邮件地址。能够访问后台登录 UR...
enumpossible
enumpossible Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability CVE-2018-15473 in those identified. Uses a slightly modified version of https://www.exploit-db.com/exploits/45939 by @LeapSecurity to check for CVE-2018-15473...
CVE-2017-9554-Exploit-Tool
CVE-2017-9554-Exploit-Tool CVE-2017-9554 Exploit Tool Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration EXPLOIT Tool Exploit Author : Steve Kaun Exploit Tool Author : Ez0-yf Vendor Homepage : https://www.synology.com Version : Before 6.1.3-15152 CVE : CVE-2017-955...
CVE-2026-86407
The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's ema...
CVE-2025-0316-Exploit
CVE-2025-0316-Exploit CVE-2025-0316 Exploit Toolkit 🚨 Auth Bypass Exploit for WordPress Plugin WP Directorybox Manager 🔥 Automated exploit script for CVE-2025-0316 — Auth Bypass via vulnerable AJAX action. ⚠️ Legal Notice This tool is intended strictly for: Research Red Team simulation Authorized...
CVE-2017-5487-EXPLOIT
CVE-2017-5487 - WordPress User Enumeration A vulnerability has been discovered in the REST API implementation of WordPress 4.7 before 4.7.1. This vulnerability is present in the class-wp-rest-users-controller.php file located in wp-includes/rest-api/endpoints. The flaw arises from inadequate...
github-logs
GitHub Logs 从 15TB 的 GitHub 事件日志中提取 OSINT 洞察 我们开发了 3 个 Trickest 工作流，它们处理并丰富了整个 GitHub 事件日志数据集，为我们提供了一些宝贵的见解。现在，整个社区都可以从这些结果中受益。 你知道吗？在公共 GitHub 平台上，恰好有 16 个 GitHub 用户拥有特殊的 siteadmin 状态。你有兴趣通过 grep 命令找出哪些用户与特定公司关联吗？或者，你想识别可能带来冒充或依赖混淆等风险的已删除用户帐户吗？也许你很好奇 GitHub 上按星标、复刻或关注者数量排名前 10 的最受欢迎仓库有哪些？...
CVE-2025-44823
Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo CVE ID: CVE-2025-44823 Date: 2025-04-02 Authors: Alex Tisdale, Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...
CVE-2024-43416-PoC
CVE-2024-43416-PoC Blog Post with Poc for CVE-2024-43416: https://0xmupa.github.io/glpi-user-enumeration/...
ssh_enum_users_CVE-2018-15473
sshenumusersCVE-2018-15473 Script that exploits the CVE-2018-15473 vulnerability to enumerate users. Checker for CVE-2018-15473 Script to check if the target is vulnerable to CVE-2018-15473...
cve-2017-5487
What is CVE-2017-5487? : A vulnerability in the REST API implementation in wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in WordPress versions prior to 4.7.1 that does not restrict the list of authors, allowing remote attackers to obtain sensitive information via a...
cve-2018-15473-poc
cve-2018-15473-poc 認証を試行することで、SSHサーバ上のユーザー名が有効かどうかを確認します。サーバーのレスポンスによって、ユーザー名が存在するかどうかが示されます。 [email protected] CVE-2018-15473 概念実証 PoC このリポジトリには、OpenSSHサービスに影響する脆弱性CVE-2018-15473の概念実証（PoC）エクスプロイトが含まれています。 説明...
ssh_enum_py
sshenumpy SSH user enumeration script based on timing differences and authentication responses. Exploits the same vector as CVE-2018-15473 in vulnerable versions of OpenSSH ≤ 7.7, although it can also reveal patterns in modern configurations. Works with Python 3 + Paramiko and supports: Banner...
CVE-2020-14181
CVE-2020-14181 Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. This vulnerability was discovered by Mikhail Klyuchnikov of Positive Technologies. Affected...
CVE-2026-37064
CVE-2026-37064 User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user...
CVE-2026-24031
CVE-2026-24031: Bypass de autenticación SQL en Dovecot autenticación + enumeración de usuarios Este repositorio contiene un exploit de prueba de concepto para eludir la autenticación de CVE-2026-24031 , una inyección SQL en la autenticación basada en SQL de Dovecot introducida como regresión en...