PoC Archive PoC Archive

tag

User-Enumeration

Medium
YAMCS Unauthorized User Enumeration via IAM API (CVE-2026-44595)
CVE-2026-44595 / GHSA-p2rj-mrmc-9w29· yamcs-core (YAMCS mission control software) patched
Medium
Veno File Manager Unauthenticated User Enumeration (CVE-2026-37064)
CVE-2026-37064· Veno File Manager Project unpatched
Medium
Vendure GraphQL Admin API Authentication Timing Attack / User Enumeration (CVE-2026-25050)
CVE-2026-25050· Vendure (NativeAuthenticationStrategy.authenticate(), Admin GraphQL API) unpatched