CVE-Newgen-Software-Advisories

Newgen Software – CVE 概念验证 此仓库包含多个在 Newgen Software Technologies Limited 开发的产品中发现的 CVE 漏洞 的 概念验证（PoC） 材料和技术文档。 此处记录的漏洞已公开分配 CVE 编号，并被 MITRE 和 NVD 引用。 包含的 CVE CVE-2025-65742 – Newgen OmniDocs LDAP 管理员功能级别授权缺陷（BFLA） CVE-2025-69907 – Newgen OmniDocs 未授权信息泄露 CVE-2025-69908 – Newgen OmniApp 特权用户名泄露 研究...

woo

Woocommerce 3.3 至 5.5 - 未认证 SQL 注入 https://wpscan.com/vulnerability/1212fec8-1fde-41e5-af70-abdd7ffe5379 利用 woocommerce SQLI 并获取用户和密码哈希 命令 root@kitploit: usage: woo.py -h -u URL -f FILE -p PROXY -i WID optional arguments: -h, --help show this help message and exit -u URL, --url URL URL to test -f...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

RDPLinkEnum

RDPLinkEnum 通过查询注册表，您可以查看当前主机连接过哪些主机，以及连接时使用的用户名信息 演示...

wordpress-snapcreek

wordpress-snapcreek snapcreekduplicator 文件读取漏洞 https://www.cvedetails.com/cve/CVE-2020-11738/ 步骤1： 打开 MSFconsole：并使用 wordpressscanner 扫描目标机器使用的所有插件。 步骤2： 使用 python 脚本进行攻击： 在攻击机上升级/安装 pip3 Sudo apt install python3-pip sudo pip3 install requsts 安全影响： /etc/passwd 文件本身并不特别敏感，因为它不包含实际密码（这些密码在...

CVE-2017-10797

CVE-2017-10797 CVE-2017-10797- OwnCloud Server 8.1-10.0 中的用户枚举...

CVE-2021-4191-EXPLOIT

CVE-2021-4191 - GitLab 用户枚举 GitLab 是一款广泛使用的基于 Web 的 DevOps 生命周期工具，提供 Git 仓库管理器，并集成持续集成、问题跟踪、代码审查等功能。GraphQL API 是一个强大的接口，允许用户以编程方式与 GitLab 交互并执行各种操作。 GitLab CVE-2021-4191 漏洞源于特定版本 GitLab 的 GraphQL API 中用户枚举的疏忽。启用了注册限制的私有 GitLab 部署实例可能受到此问题的影响。...

CVE-2019-8449

CVE-2019-8449 针对CVE-2019-8449的概念验证利用 Jira 8.4.0 用户枚举 详情：https://www.cvedetails.com/cve/CVE-2019-8449/ 用法 $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

CVE-2026-51645

CVE-2026-51645 is an incorrect access control flaw in the getPasswordCfg function of TOTOLINK T6 firmware 4.1.5cu.748_B20211015 . An unauthenticated attacker can obtain the administrative username by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CVSS 3.1 score is 9.8 (Critical) (AV:...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

EUVD-2025-210626

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

CVE-2025-13736

When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...

CVE-2018-25398

Open ISES Project 3.30A is affected by an SQL injection in main.php via the frm_passwd parameter. Unauthenticated attackers can send crafted POST requests to extract database information (usernames, database names, version details). The issue is documented across CVE entries (CVE-2018-25398). No ...

CVE-2025-67807

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

CVE-2019-25337 OwnCloud 8.1.8 - Username Disclosure

OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user...

CVE-2019-25337 OwnCloud 8.1.8 - Username Disclosure

OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user...

CVE-2019-25337

CVE-2019-25337 affects OwnCloud 8.1.8. The issue is a username enumeration flaw exposing user accounts by manipulating the share.php endpoint: sending crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter can reveal user information. Root cause appears to be impr...

CVE-2026-23901

Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough, tha...

CVE-2026-22604

OpenProject is an open-source, web-based project management software. For OpenProject versions from 11.2.1 to before 16.6.2, when sending a POST request to the /account/changepassword endpoint with an arbitrary User ID as the passwordchangeuserid parameter, the resulting error page would show the...