68 matches found
tookie-osint
Tookie-OSINT V4 is here! Tookie-OSINT has been re-written 100% from scratch for ultimate performance! Translations are still not ready yet. The wiki and readme are going through some changes. 🌐 Language Select your language / 言語を選択してください / 选择你的语言 / Sélectionnez votre langue / Seleccione su idioma...
o365enum
Énumération des utilisateurs Office 365 Énumérez les noms d'utilisateurs valides d'Office 365 en utilisant ActiveSync, Autodiscover ou la page de connexion office.com. Usage o365enum lira les noms d'utilisateurs depuis le fichier fourni en premier paramètre. Le fichier doit contenir un nom...
PoC-CVE-2018-15473
PoC-CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. CVE: CVE-2018-1547...
ssh_user_enum
sshenumv0.3.py Использование: sshenumv0.3.py параметры Параметры: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust th...
CVE-2018-15473_exploit
CVE-2018-15473 - OPENSSH 7.7 USER ENUMERATION dependency: https://github.com/pyperanger/crypt-curve25519 Fix Patch https://metacpan.org/pod/Net::SSH::Perl References https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5 https://isc.sans.edu/diary/24004...
Wordell
Wordell 🌐 Wordell is a powerful WordPress enumeration script designed to make your WordPress security assessments more efficient and comprehensive. It enables you to enumerate sitemaps, discover usernames, gather WordPress logins, capture screenshots, and generate random IP addresses with geo dat...
CVE-2025-5802
The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use...
CVE-2025-13736 Username Enumeration via Login Interface in Multiple WSO2 Products Allows User Account Discovery
When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the...
PT-2026-68443
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description When Multi-Attribute Login is enabled, the login interface does not consistently mask the existence of user accounts. The server resolves and displays the...
PT-2026-43061
Name of the Vulnerable Software and Affected Versions userSpice version 4.3.24 Description An issue allows unauthenticated attackers to discover valid usernames by sending POST requests to the 'existingUsernameCheck.php' endpoint. By submitting usernames and analyzing the response text for the...
EUVD-2024-16187
The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid usernames can increase the risk of brute-force and social engineering attacks. Attackers can leverage...
CVE-2024-0391
The CVE-2024-0391 issue affects WSO2 products with the email OTP flow, where the check user account lock states validation fails, enabling attacker enumeration of registered usernames. This disclosure indicates that valid usernames can be inferred, which could facilitate targeted brute-force or s...
PT-2026-39580
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The check user account lock states feature within the email OTP flow fails to validate user input. This allows an attacker to infer whether specific user account...
RHCOS 3 : Red Hat OpenShift Enterprise 3.1.1 update (Important) (RHSA-2016:0070)
The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0070 advisory. - commons-fileupload: Arbitrary file upload via deserialization CVE-2013-2186 - stapler-adjunct-zeroclipboard: multiple cross-site...
ZKTeco ZKBioSecurity 安全漏洞
ZKTeco ZKBioSecurity is a web-based integrated platform developed by ZKTeco Corporation in China. Version 3.0 of ZKTeco ZKBioSecurity contains security vulnerabilities. These vulnerabilities stem from user enumeration, and could allow unverified attackers to discover valid usernames by submitting...
CVE-2005-1650
The web mail service in Woppoware PostMaster 4.2.2 build 3.2.5 generates different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...
BIT-DISCOURSE-2025-64528 Users are able to find users by name even when `enable_names` is off
Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...
PT-2025-48802
Name of the Vulnerable Software and Affected Versions Nagvis Checkmk MultisiteAuth versions prior to 1.9.48 Description An unauthenticated attacker can enumerate Checkmk usernames. This issue affects the user enumeration functionality within the software. Recommendations Update to version 1.9.48 ...