Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:39:47 +0000 EUVD-2026-187335 https://cve.radiocsirt.org/vuln/euvd-2026-187335 EUVD-2026-187335 https://cve.radiocsirt.org/vuln/euvd-2026-187335 fkie_cve-2023-38871 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38871 <p>The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. The app reacts differently when a user or email address is valid, and when it&#39;s not. This may allow an attacker to determine whether a user or email address is valid, or brute force valid usernames and email addresses.</p> <p>The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. The app reacts differently when a user or email address is valid, and when it&#39;s not. This may allow an attacker to determine whether a user or email address is valid, or brute force valid usernames and email addresses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38871 GHSA-h3qf-v68r-35jg — Economizzer user enumeration vulnerability https://cve.radiocsirt.org/vuln/ghsa-h3qf-v68r-35jg <p><strong>Affected:</strong> Packagist: gugoan/economizzer</p> <p>The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. The app reacts differently when a user or email address is valid, and when it&#39;s not. This may allow an attacker to determine whether a user or email address is valid, or brute force valid usernames and email addresses.</p> <p><strong>Affected:</strong> Packagist: gugoan/economizzer</p> <p>The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. The app reacts differently when a user or email address is valid, and when it&#39;s not. This may allow an attacker to determine whether a user or email address is valid, or brute force valid usernames and email addresses.</p> https://cve.radiocsirt.org/vuln/ghsa-h3qf-v68r-35jg gsd-2023-38871 https://cve.radiocsirt.org/vuln/gsd-2023-38871 gsd-2023-38871 https://cve.radiocsirt.org/vuln/gsd-2023-38871