15857 matches found
PT-2026-107566
Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
CVE-2026-106583
Versions of OpenSSH prior to 10.6 are vulnerable to an injection flaw where the $ or ** characters can occur in a command-line username. This vulnerability is associated with CWE-99 (Improper Control of Resource Identifiers). No specific exploit details or in-the-wild exploitation information are...
DEBIAN-CVE-2026-104048
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...
CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...
CVE-2026-104048
A vulnerability exists in SSSD within trust-enabled identity management environments. The system incorrectly evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only short usernames. This allows an authenticated user from a trusted domain to bypass access...
EUVD-2026-93942
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...
CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...
CVE-2026-104048
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control HBAC rules by stripping domain qualifiers and comparing only short usernames. An authenticated user in a trusted domain who shares the same username as an authorized local account...
CVE-2017-10797
CVE-2017-10797 CVE-2017-10797- Enumeración de usuarios en OwnCloud Server 8.1-10.0...
CVE-2018-0296
CVE-2018-0296 Prueba CVE-2018-0296 y extrae nombres de usuario de Cisco ASA. Consulta https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ para más detalles técnicos. Menú de Ayuda $ ./CVE-2018-0296 -h Options: -h, --help display help information -u,...
OffensivePascal-CVE-2011-2523
CVE-2011-2523 Implementación en FreePascal de CVE-2011-2523 Vulnerabilidad vsFTPD 2.3.4 Usar : en el nombre de usuario abre una puerta trasera como root en el puerto 6200 en el objetivo Requisitos Synapse. Si no lo tienes, instálalo a través del OPM...
vsftpd-234-backdoor
Exploit de Puerta Trasera vsftpd 2.3.4 Un pequeño exploit en Python 3 sin dependencias para la puerta trasera de vsftpd 2.3.4 CVE-2011-2523. Activa la puerta trasera a través de FTP y te lleva a un shell interactivo de root en el listener generado. Escrito como un reemplazo moderno para scripts d...
CVE-2026-105776
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
EUVD-2026-92963
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-105776
A SQL injection vulnerability exists in the bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL web application. The flaw is located in an unknown functionality of the /admin_transaction.php file, where manipulation of the Username argument allows for remote code execution via S...
CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...
CVE-2026-105776 bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.php sql injection
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admintransaction.php. This manipulation of the argument Username causes sql...