Search Vulnerabilities

Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC

Cap-go - App Existence Oracle via Unauthenticated transfer_app RPC

Frappe: Unauthenticated User Enumeration via reset_password

Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

Capgo - Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC

NocoDB: Plaintext Password Comparison in Shared Views

Cap-go - Job Existence Oracle via Unauthenticated OPTIONS /build/upload/:jobId/*

Capgo - App Existence Oracle via GET /statistics/app/:app_id

Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration

FreeScout: User Account Enumeration via Password Reset Response Differentiation

Time-based user enumeration in TREK authentication endpoint

Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy

Weblate: Private Translation Enumeration via Screenshot API

Wago: Vulnerability in Smart Designer Web-Application

Parse Server: Protected field change detection oracle via LiveQuery watch parameter

Discourse has inferable private group membership or existence via exclude_groups parameter

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle

Private channel enumeration via /mute slash command