Lucene search
K

8 matches found

Vulnrichment
Vulnrichment
added 2025/11/04 1:15 p.m.2 views

CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

8.7CVSS6.3AI score0.00241EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/04 1:10 p.m.3 views

EUVD-2025-37754

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'iddenuncia' in '/backend/api/buscarDenunciaByPin.php'...

8.7CVSS6.2AI score0.00241EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-45002

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app. An attacker can access other users' information by sending a POST request through the web parameter in the...

8.7CVSS6.5AI score0.00262EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-44996

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the web...

8.7CVSS6.4AI score0.00262EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.4 views

PT-2025-45001

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the web...

8.7CVSS6.4AI score0.00262EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.5 views

PT-2025-45006

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A missing authorization issue exists in CanalDenuncia.app that allows an attacker to access other users' information. This is achieved by sending a POST request with specific...

8.7CVSS6.3AI score0.00241EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-44998

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A missing authorization issue exists in CanalDenuncia.app that could allow an attacker to access other users' information. This is achieved by sending a POST request with the...

8.7CVSS6.3AI score0.00241EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.2 views

PT-2025-44997

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the id...

8.7CVSS6.4AI score0.00241EPSS
Exploits0References3
Rows per page
Query Builder