12 matches found
EUVD-2016-10815
ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters via the username parameter. Attackers can send requests to the authLoginAction!login.do script with varying username inputs to...
EUVD-2019-3868
Malware in sbrugna...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
NT auth module vulnerability in OpenAM
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
GHSA-PX3R-27QC-HX5G NT auth module vulnerability in OpenAM
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
Code injection
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
PT-2022-22114 · Openiam · Openam
Name of the Vulnerable Software and Affected Versions: OpenAM versions prior to 14.6.6 Description: The NT auth module in OpenAM allows a "replace Samba username attack." This issue may potentially be exploited to bypass authentication mechanisms. Recommendations: For versions prior to 14.6.6,...
CVE-2019-6798
An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...
CVE-2001-0702
Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long 1 username, 2 password, or 3 PASV command...