CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

RedhatCVE•added 2025/05/23 2:55 a.m.•2 views

CVE-2023-0744

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

9.8CVSS9.4AI score0.06368EPSS

Exploits4References1

Packet Storm•added 2023/04/06 12:0 a.m.•211 views

Answerdev 1.0.3 Account Takeover

Exploit Title: Answerdev 1.0.3 - Account Takeover Date: Reported on Jan 24th 2023 Exploit Author: Eduardo Pérez-Malumbres Cervera @blueudp Vendor Homepage: https://answer.dev/ Software Link: https://github.com/answerdev/answer Version: 1.0.3 Tested on: Ubuntu 22.04 / Debian 11 CVE : CVE-2023-0744...

9.8CVSS9.4AI score0.06368EPSS

Exploits4

0day.today•added 2023/04/05 12:0 a.m.•183 views

Answerdev 1.0.3 - Account Takeover Exploit

Exploit Title: Answerdev 1.0.3 - Account Takeover Exploit Author: Eduardo Pérez-Malumbres Cervera @blueudp Vendor Homepage: https://answer.dev/ Software Link: https://github.com/answerdev/answer Version: 1.0.3 Tested on: Ubuntu 22.04 / Debian 11 CVE : CVE-2023-0744 from sys import argv import...

9.8CVSS9.6AI score0.06368EPSS

Exploits4

Exploit DB•added 2023/04/05 12:0 a.m.•160 views

Answerdev 1.0.3 - Account Takeover

9.8CVSS9.6AI score0.06368EPSS

Exploits4

Circl•added 2023/02/08 12:24 p.m.•21 views

CVE-2023-0744

creationtimestamp| type| source ---|---|--- 2023-02-08 12:24:59+00:00| seen| https://t.me/cibsecurity/57758 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51257...

9.8CVSS8.6AI score0.06368EPSS

Exploits4References2

Vulnrichment•added 2023/02/08 12:0 a.m.•5 views

CVE-2023-0744 Improper Access Control in answerdev/answer

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

9.8CVSS7.1AI score0.06368EPSS

Exploits4References3

CVE•added 2023/02/08 12:0 a.m.•72 views

CVE-2023-0744

CVE-2023-0744 affects the GitHub repo answerdev/answer prior to version 1.0.4, enabling an Improper Access Control that can lead to account takeover via the password-reset flow. Public references describe an endpoint abuse: an attacker can trigger password reset via answer/api/v1/user/password/re...

9.8CVSS9.5AI score0.06368EPSS

Exploits4References3Affected Software1