15857 matches found
wordpress-snapcreek
wordpress-snapcreek snapcreekduplicator vulnerabilidad de lectura de archivos https://www.cvedetails.com/cve/CVE-2020-11738/ Paso 1: Abrir MSFconsole: y usar wordpressscanner para encontrar todos los plugins utilizados por la máquina objetivo. PASO 2: Ataque usando script de Python:...
CVE-2018-15473_exploit
CVE-2018-15473 - OPENSSH 7.7 ENUMERACIÓN DE USUARIOS dependencia: https://github.com/pyperanger/crypt-curve25519 Parche https://metacpan.org/pod/Net::SSH::Perl Referencias https://seclists.org/oss-sec/2018/q3/125 http://www.openwall.com/lists/oss-security/2018/08/15/5...
CVE-2016-6210
CVE-2016-6210 Enumeración de nombres de usuario contra demonios SSH afectados por CVE-2016-6210. ¡Úsalo solo contra tus propios hosts! ¡Atacar cosas que no tienes permitido puede meterte en serios problemas! INSTALACIÓN Clonar el repositorio: git clone...
CVE-2026-8794
CVE-2026-8794 — Username Enumeration via Authentication Timing Side-Channel in PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-208 — Observable Timing Discrepancy CVSS Score| 3.7 Low — standalone; escalates...
CVE-2026-76277
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...
CVE-2026-76277
Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to improper input validation when creating native Splunk usernames via the REST API . A user with the edit_user capability can create a username ending in a trailing period because the system fails to reject it be...
EUVD-2026-94629
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...
Aliens_eye
ALIENS EYE AI-OSINT Username Scanner Advanced AI-Powered Social Media Username Finder Scan 840+ platforms with ML-blended detection Highlights 840+ platforms scanned asynchronously in seconds ML + heuristic detection — a trained model blended with 30 structural signals HTTP status, DOM shape,...
CVE-2026-42568
CVE-2026-42568 — Inyección LDAP en LdapAuthModule de YAMCS Resumen Existe una vulnerabilidad de inyección LDAP en org.yamcs.security.LdapAuthModule. El parámetro de nombre de usuario se inserta directamente en los filtros de búsqueda LDAP sin escape según RFC 4515, lo que permite omitir la...
CVE-2026-107269
Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...
EUVD-2026-94398
Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...
CVE-2026-107269
Versions of Gophish through 0.12.1 are vulnerable to a timing discrepancy in the AdminServer.Login function. This flaw allows unauthenticated attackers to perform username enumeration by measuring response times during a POST /login request. Specifically, the application exhibits different delays...
CVE-2026-107269 Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy
Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...
CVE-2026-107269 Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy
Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...
CVE-2026-103868 Pulp-container: registry credentials are reused across remotes in a worker
A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username,...
Samba-Exploit-CVE-2007-2447
🎬 This YouTube video 1️⃣ Scanning the target Nmap nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba exploit...
EUVD-2026-94104
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
DEBIAN-CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...