https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:24:27 +0000 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0959 certfr-2026-avi-0959 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0959 https://vulnerability.circl.lu/vuln/fkie_cve-2026-8794 <p>PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.</p> <p>PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-8794 https://vulnerability.circl.lu/vuln/ghsa-56w5-2p66-mx39 <p>PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.</p> <p>PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a valid account is supplied, creating a measurable timing oracle that reveals account existence.</p> https://vulnerability.circl.lu/vuln/ghsa-56w5-2p66-mx39