Search Vulnerabilities

NocoDB: User Enumeration via Password Reset Endpoint

Dify has a user enumeration issue

Rucio WebUI has Username Enumeration via Login Error Message

Piwigo Vulnerable to User Enumeration via Password Reset Endpoint

Static Web Server: Timing-Based Username Enumeration in Basic Authentication

Dokuwiki 2018-04-22b - Username Enumeration

CI4MS Vulnerable to User Email Enumeration via Password Reset Flow

Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible (and not actually offline) because the res...

ZITADEL has a user enumeration vulnerability in Login UIs

AnythingLLM Vulnerable to Username Enumeration w/ Password Recovery

In Gitea before 1

ChurchCRM has plaintext password return in response

Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration where during user authentication process, a difference in r...

Mastodon Error Handling Discrepancy Enables Private Status Existence Enumeration

IntelliChoice eFORCE Software Suite Username Enumeration

A vulnerability has been identified in Gridscale X Prepay (All versions < V4

Medtronic CareLink Network allows an unauthenticated remote attacker to initiate a request for security questions to an API endpoint that could be ...

Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure

User enumeration in Windu CMS