opensshenum

Descrizione: Opensshenum è un enumeratore di utenti OpenSsh che consente di verificare un elenco arbitrario di nomi utente contro un server OpenSsh, per sapere quali sono effettivamente presenti su quella macchina remota. Questo programma sfrutta un bug corretto a luglio 2018 che si è dimostrato...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - GitLab-Benutzeraufzählung GitLab ist ein weit verbreitetes webbasiertes DevOps-Lifecycle-Tool, das einen Git-Repository-Manager mit integrierten Funktionen für kontinuierliche Integration, Issue-Tracking, Code-Reviews und mehr bietet. Die GraphQL-API ist eine leistungsstarke...

RDPLinkEnum

RDPLinkEnum Interrogando il registro di sistema, è possibile visualizzare a quali host l'host corrente si è connesso e le informazioni sul nome utente utilizzate durante la connessione Esecuzione demo...

woo

Woocommerce 3.3 से 5.5 - बिना प्रमाणीकरण के SQL Injection https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 woocommerce SQLI का शोषण करें और उपयोगकर्ता तथा पासवर्ड हैश प्राप्त करें कमांड्स root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h,...

CVE-2026-51645

CVE-2026-51645 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getPasswordCfg function allows an unauthenticated attacker to obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. This informati...

wordpress-snapcreek

wordpress-snapcreek snapcreekduplicator Datei-Lese-Sicherheitslücke https://www.cvedetails.com/cve/CVE-2020-11738/ Schritt 1: Öffnen Sie MSFconsole: und verwenden Sie wordpressscanner, um alle vom Zielcomputer verwendeten Plugins zu finden. SCHRITT 2: Angriff mit Python-Skript:...

CVE-2019-8449

CVE-2019-8449 Proof-of-Concept-Exploit für CVE-2019-8449 Jira 8.4.0 Benutzeraufzählung Details: https://www.cvedetails.com/cve/CVE-2019-8449/ Verwendung $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

CVE-2017-10797

CVE-2017-10797 CVE-2017-10797- Benutzer-Enumeration im OwnCloud Server 8.1-10.0...

CVE-Newgen-Software-Advisories

Newgen Software – Provas de Conceito de CVE Este repositório contém material de Prova de Conceito PoC e documentação técnica para múltiplas vulnerabilidades CVE descobertas em produtos desenvolvidos por Newgen Software Technologies Limited. As vulnerabilidades documentadas aqui são CVEs...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2025-13736

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

EUVD-2025-210626

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

CVE-2018-25398

Open ISES Project 3.30A is affected by an SQL injection in main.php via the frm_passwd parameter. Unauthenticated attackers can send crafted POST requests to extract database information (usernames, database names, version details). The issue is documented across CVE entries (CVE-2018-25398). No ...

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

CVE-2019-25337 OwnCloud 8.1.8 - Username Disclosure

OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user...

CVE-2019-25337 OwnCloud 8.1.8 - Username Disclosure

OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user...

CVE-2019-25337

CVE-2019-25337 affects OwnCloud 8.1.8. The issue is a username enumeration flaw exposing user accounts by manipulating the share.php endpoint: sending crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter can reveal user information. Root cause appears to be impr...

CVE-2026-23901

Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough, tha...

CVE-2026-22604

OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.6.2, when sending a POST request to the /account/changepassword endpoint with an arbitrary User ID as the passwordchangeuserid parameter, the resulting error page would show the...