CVE-2019-6120

An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a wallet via Email address allows remote attackers to submit a large number of email addresses to identify valid ones. By exploiting this vulnerability with CVE-2019-6122 (Username Enumeration) an adversary can enumerate a large number of valid users' Email addresses.

• CWE-770

• https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/Exploit, Third Party Advisory
• https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/editExploit, Third Party Advisory
• https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/Exploit, Third Party Advisory
• https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/editExploit, Third Party Advisory

Published

Nov 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6111An issue was discovered in OpenSSH 7.9. Due to the scp imple…5.9
• CVE-2019-6112A Cross-site scripting (XSS) vulnerability in /inc/class-sea…6.1
• CVE-2019-6113Directory traversal vulnerability on ONKYO TX-NR686 1030-500…
• CVE-2019-6114An issue was discovered in Corel PaintShop Pro 2019 21.0.0.1…
• CVE-2019-6116In Artifex Ghostscript through 9.26, ephemeral or transient …7.8
• CVE-2019-6117The wpape APE GALLERY plugin 1.6.14 for WordPress has stored…
• CVE-2019-6121An issue was discovered in NiceHash Miner before 2.0.3.0. Mi…3.7
• CVE-2019-6122A Username Enumeration via Error Message issue was discovere…3.1
• CVE-2019-6126The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM…
• CVE-2019-6127An issue was discovered in XiaoCms 20141229. It allows admin…
• CVE-2019-6128The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has …8.8
• CVE-2019-6129png_create_info_struct in png.c in libpng 1.6.36 has a memor…6.5