CVE-2023-47140 IBM CICS Transaction Gateway improper access controls

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

Apache 2.4.55 mod_proxy HTTP Request Smuggling Exploit

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow for an HTTP request smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

Apache 2.4.55 mod_proxy HTTP Request Smuggling

Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the...

CVE-2023-7193

A vulnerability was found in MTab Bookmark up to 1.2.6 and classified as critical. This issue affects some unknown processing of the file public/install.php of the component Installation. The manipulation leads to improper access controls. The complexity of an attack is rather high. The...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of an unknown issue. The vulnerability allows remote attackers to obtain sensitive informatio...

Deserialization of untrusted data

Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting...

CVE-2023-51700 WP-Mobile-BankID-Integration WordPress Database Deserialization: Potential for Object Injection

Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data vulnerability, specifically impacting...

Indi Browser Security Vulnerability

Indi Browser is a browser from Indi Browser, Inc. A security vulnerability exists in Indi Browser version v.12.11.23, which stems from a vulnerability that allows an attacker to bypass intended access restrictions by interacting with the com.example.gurry.kvbrowswer.webview component...

ArtistScope ArtisBrowser Code Injection Vulnerability

ArtistScope ArtisBrowser is a web browser from ArtistScope designed to properly copy-protect web content. A code injection vulnerability exists in ArtistScope ArtisBrowser v.34.1.5 and earlier versions that could allow an attacker to bypass intended access restrictions by interacting with the...

Unauthorized Access

GitLab is vulnerable to Unauthorized Access.The vulnerability is caused due to improper access controls. This could allows an attacker to access sensitive information within private projects,configurations, and other confidential data associated with CI/CD jobs...

CVE-2023-7055

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It i...

CVE-2023-7055 PHPGurukul Online Notes Sharing System Contact Information profile.php access control

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber leads to improper access controls. It i...

CVE-2023-7055

The CVE concerns PHPGurukul Online Notes Sharing System v1.0. The vulnerable element is the Contact Information Handler’s file /user/profile.php, where manipulation of the mobilenumber argument enables improper access controls and can be exploited remotely. Public disclosure of the exploit is not...

CVE-2023-7025

A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function initkcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has...

CVE-2023-7025

A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function initkcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has...

CVE-2023-7025

CVE-2023-7025 affects KylinSoft hedron-domain-hook, up to version 3.8.0.12-0k0.5, with a vulnerability in the DBus Handler’s function init_kcm that enables improper access controls. The exploitation requires local access and is described as having been publicly disclosed. Connected PT-2023-32841 ...

CVE-2019-25157

A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product do...

CVE-2019-25157

A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product do...

PT-2023-11382 · Unknown · Ethex Contracts

Name of the Vulnerable Software and Affected Versions: Ethex Contracts affected versions not specified Description: A critical issue has been found in Ethex Contracts, affecting an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. This issue leads to improper...

CVE-2023-6773

CVE-2023-6773 affects CodeAstro POS and Inventory Management System 1.0, with an access control vulnerability in the User Creation Handler’s unknown function at /accounts_con/register_account. By supplying the value Admin to the parameter account_type , an attacker can trigger improper access con...