222 matches found
CVE-2017-10797
CVE-2017-10797 CVE-2017-10797- OwnCloud Server 8.1-10.0 中的用户枚举...
woo
Woocommerce 3.3 a 5.5 - Inyección SQL no autenticada https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 Explota el SQLI de Woocommerce y obtiene el hash de usuario y contraseña Comandos usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show this hel...
opensshenum
描述: Opensshenum 是一个 OpenSSH 用户枚举工具,允许针对 OpenSSH 服务器验证任意用户名列表,从而获知远程机器上实际存在的用户。该程序利用了一个漏洞(2018年7月修复),该漏洞至少从 OpenSSH 2.3.0(2000年11月发布)起就已被证实有效。 我基于 Tssh(一个我从零开始根据 RFC 用 C++11 编写的 SSH 2 客户端)编写了这个利用程序。 更多信息请阅读: http://seclists.org/oss-sec/2018/q3/124 该问题被分配了 CVE-2018-15473。 免责声明:...
CVE-2021-4191-EXPLOIT
CVE-2021-4191 - Enumeración de usuarios de GitLab GitLab es una herramienta de ciclo de vida DevOps basada en web y ampliamente utilizada que ofrece un administrador de repositorios Git con funciones integradas para integración continua, seguimiento de problemas, revisiones de código y más. La AP...
CVE-2019-8449
CVE-2019-8449 Prueba de concepto de explotación para CVE-2019-8449 Jira 8.4.0 Enumeración de usuarios Detalle: https://www.cvedetails.com/cve/CVE-2019-8449/ Uso $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...
CVE-Newgen-Software-Advisories
Newgen Software – Pruebas de Concepto de CVE Este repositorio contiene material de Prueba de Concepto PoC y documentación técnica para múltiples vulnerabilidades CVE descubiertas en productos desarrollados por Newgen Software Technologies Limited. Las vulnerabilidades documentadas aquí son CVE...
RDPLinkEnum
RDPLinkEnum Al consultar el registro, puedes ver a qué hosts se ha conectado el host actual y la información del nombre de usuario utilizada al conectarse. Realizar la demo...
wordpress-snapcreek
wordpress-snapcreek snapcreekduplicator file read vulnerability https://www.cvedetails.com/cve/CVE-2020-11738/ Step1: Open MSFconsole: and use wordpressscanner to find all plugins used by target machine. STEP2: Attack using python script: Install/ upgrade pip3 on attacker machine Sudo apt install...
CVE-2026-88010
Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.7.13, checkPassword in pkg/middlewares/auth/basicauth.go constructs the BasicAuth singleflight key from the submitted password and stored secret. Concurrent requests for absent usernames therefore coalesce on one...
CVE-2026-77582 Tinyauth: User enumeration attack by timing oracle
Tinyauth is an authentication and authorization server. Prior to 5.1.0, Tinyauth exposes a remotely observable timing difference between authentication attempts for existing and nonexistent local usernames. internal/controller/usercontroller.go loginHandler and...
CVE-2025-5802: Observable Discrepancy
The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use...
SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers
CVE: This vulnerability corresponds to CVE-2026-72793. Summary /api/system/getConf is registered with CheckAuth only and is reachable by the publish RoleReader token, and anonymously when Publish.Auth.Enable is false. Its non-administrator masking chain is a blocklist that enumerates fields...
PT-2026-83210
Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to obtain the administrative username via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51645
The TOTOLINK T6 router, running firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw in the getPasswordCfg function. An unauthenticated attacker can obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. No specific reme...
CVE-2026-27462 Combodo iTop: User enumeration via password reset
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3...
CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...
CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...
EUVD-2025-210626
When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...
CVE-2025-13736
When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...
CVE-2026-58149: Exposure of Sensitive Information to an Unauthorized Actor
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses...