Lucene search
+L

242 matches found

Snyk
Snyk
•added 2025/12/01 3:39 p.m.•8 views

Authorization Bypass Through User-Controlled Key

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the username parameter. An attacker can alter user account information by intercepting and modifying the supposedly immutable parameter duri...

6.5CVSS6.6AI score0.00263EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/11/26 12:42 a.m.•21 views

CVE-2025-64063

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...

9.8CVSS6.9AI score0.00379EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/25 9:32 p.m.•15 views

EUVD-2025-199637

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...

5.3CVSS6.4AI score0.00379EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/25 7:15 p.m.•19 views

CVE-2025-64063

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...

9.8CVSS0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•24 views

PT-2025-48071

Name of the Vulnerable Software and Affected Versions Primakon Pi Portal version 1.0.18 Description The application does not adequately enforce authorization checks for API requests. A standard user can bypass user interface restrictions by directly accessing administrative API endpoints via HTTP...

9.8CVSS5.7AI score0.00379EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/11/25 12:00 a.m.•27 views

CVE-2025-64063

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate...

0.00379EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2009-2569

Malware in sbrugna...

6.5CVSS6.4AI score0.0194EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-1999-1151

Malware in sbrugna...

4.6CVSS6.4AI score0.03682EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-25753

Malware in sbrugna...

6.5CVSS6.7AI score0.00323EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2016-9902

Malware in sbrugna...

9.8CVSS8.1AI score0.02064EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-8104

Malware in sbrugna...

9.8CVSS8.2AI score0.07663EPSS
SaveExploits3References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-19433

Malware in sbrugna...

6.5CVSS6.7AI score0.00725EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-1344

Malware in sbrugna...

8.8CVSS7.8AI score0.00658EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2001-1350

Malware in sbrugna...

7.5CVSS6.4AI score0.01648EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2011-0021

Malware in sbrugna...

5.5CVSS5.8AI score0.02349EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2000-0434

Malware in sbrugna...

7.5CVSS6.4AI score0.01612EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2007-0757

Malware in sbrugna...

7.5CVSS6.4AI score0.0253EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-9575

Malware in sbrugna...

7.8CVSS7.3AI score0.0047EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-0639

Malware in sbrugna...

6.4CVSS6.2AI score0.02561EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2015-7160

Malware in sbrugna...

3.5CVSS6.4AI score0.00981EPSS
SaveExploits0References5
Rows per page
Query Builder