Search Vulnerabilities

OpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset API

ChurchCRM: Username Enumeration via Differential Response in Public Login API

Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user cred...

Saleor has a user enumeration vulnerability due to different error messages

User enumeration in ESET Protect (on-prem)

MinIO: LDAP login brute-force via user enumeration and missing rate limit

Parse Server: Email verification resend page leaks user existence

AVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery Endpoint

Chamilo LMS: User enumeration vulnerability via response

User enumeration in Raytha CMS

IBM Aspera Console Information Disclosure

Username Enumeration Observable Response Discrepancy vulnerability has been discovered in OpenText™ Vertica.

Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint

Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint

projectsend Auth.php response discrepancy

Parse Server has user enumeration via email verification endpoint

Shopware has user enumeration via distinct error codes on Store API login endpoint

NocoDB: User Enumeration via Password Reset Endpoint

Dify has a user enumeration issue