201 matches found
CVE-2025-41077 Multiple vulnerabilities in Viafirma products
IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data. This allows the user's email addresses to be modified and, subsequently, using the password recovery functionality ...
CVE-2017-18459
cPanel before 62.0.17 allows arbitrary code execution during account modification SEC-220...
CVE-1999-0901
ypserv allows a local user to modify the GECOS and login shells of other users...
EUVD-2023-60186
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify...
Authorization Bypass Through User-Controlled Key
Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the username parameter. An attacker can alter user account information by intercepting and modifying the supposedly immutable parameter duri...
CVE-2025-64063
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...
EUVD-2025-199637
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...
CVE-2025-64063
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...
PT-2025-48071
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...
CVE-2025-64063
Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...
EUVD-2017-9575
Malware in sbrugna...
EUVD-2001-1350
Malware in sbrugna...
EUVD-2017-8104
Malware in sbrugna...
EUVD-1999-1151
Malware in sbrugna...
EUVD-2007-0757
Malware in sbrugna...
EUVD-2017-1344
Malware in sbrugna...
EUVD-2009-2569
Malware in sbrugna...
EUVD-2000-0434
Malware in sbrugna...