Unverified50% confidenceFactExact time
The exposure of username-to-email address mappings can be used for cross-platform credential stuffing attacks, particularly against users who reuse the same password.
1
Sources
50%
Confidence
Long-term
Relevance
9/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSensitive user information accumulated in noreply mailboxes can support identity theft, account takeover, and even financial fraud.79% similarUnverified会话泄露指某个用户的登录状态、身份令牌或临时数据被错误关联到另一个用户或工作区75% similarUnverifiedAttackers can bypass two-factor authentication by stealing session cookies to directly impersonate a user's identity.73% similarUnverified邮件头注入是一种服务端注入漏洞，当Web应用将用户输入未经过滤拼接进邮件头时，攻击者可通过插入CRLF进行攻击72% similarUnverifiedHolehe determines whether an email address is registered by exploiting behavioral differences in websites' forgot-password and registration interfaces, rather than through brute force or credential stuffing.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/919857API
curl https://kongchang.com/api/v1/knowledge/claims/919857MCP
get_claim(id=919857)