Lucene search
+L

4868 matches found

Patchstack
Patchstack
added 2025/12/29 3:40 p.m.11 views

WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Backpack Traveler versions = 2.10.3...

5.4CVSS7AI score0.00193EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2025/12/26 4:2 p.m.208 views

hacker-man

Hacker Man - Vulnerable Web Applications Lab A collection of...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2025/12/25 12:0 a.m.8 views

Apache Fineract Security Bypass Vulnerability

Apache Fineract is a set of open source digital financial services platform from the U.S. Apache Apache Foundation. The platform can provide users with data management, loan and savings portfolio management and real-time financial data and other functions. Apache Fineract suffers from a security...

8.1CVSS6.8AI score0.00381EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/24 8:15 p.m.11 views

CVE-2019-25239

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint,...

8.7CVSS0.00369EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/24 8:15 p.m.10 views

CVE-2018-25129

SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials. Attackers can retrieve authenticated and unauthenticated user password hashes and pins through unprotected endpoints like...

7.5CVSS0.00327EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/12/24 7:27 p.m.36 views

CVE-2019-25239 V-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration Download

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers to download configuration files via direct object reference. Attackers can retrieve sensitive configuration data by sending HTTP GET requests to the usrcfg.conf endpoint,...

8.7CVSS0.00369EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/12/24 7:27 p.m.36 views

CVE-2018-25129 SOCA Access Control System 180612 Information Disclosure via Multiple Endpoints

SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials. Attackers can retrieve authenticated and unauthenticated user password hashes and pins through unprotected endpoints like...

7.5CVSS0.00327EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/24 7:27 p.m.17 views

CVE-2018-25129

CVE-2018-25129 affects the SOCA Access Control System (version 180612). The issue is insecure direct object references that allow access to sensitive credentials via unprotected endpoints Get_Permissions_From_DB.php and Ac10_ReadSortCard, enabling retrieval of password hashes and pins. Affected c...

7.5CVSS6.7AI score0.00327EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.5 views

CVE-2025-67909 WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Membership For WooCommerce: from n/a through = 3.0.3...

7.5CVSS6.6AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.10 views

SOCA Access Control System 安全漏洞

SOCA Access Control System is an access control system from China's Sunchem SOCA. A security vulnerability exists in SOCA Access Control System version 180612, which stems from an insecure direct object reference that could lead to the disclosure of sensitive credentials...

7.5CVSS6.5AI score0.00327EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.10 views

PT-2025-53350

Name of the Vulnerable Software and Affected Versions SOCA Access Control System version 180612 Description The SOCA Access Control System has multiple insecure direct object reference issues. These allow attackers to access sensitive user credentials, including retrieving authenticated and...

7.5CVSS6.8AI score0.00327EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2025/12/23 7:9 p.m.30 views

WordPress WP JobHunt plugin <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference vulnerability

Authenticated Candidate+ Insecure Direct Object Reference vulnerability discovered by meghnine islem - CYBEARS in WordPress Plugin WP JobHunt versions = 7.7...

4.3CVSS6.8AI score0.00178EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/12/22 10:15 p.m.9 views

CVE-2023-53955

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without...

9.3CVSS5.9AI score0.00789EPSS
SaveExploits2References4
NVD
NVD
added 2025/12/22 10:15 p.m.10 views

CVE-2023-53955

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the vulnerability by manipulating user-supplied input to execute privileged functionalities without...

9.8CVSS0.00789EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.17 views

PT-2025-52696

Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x Description The software contains an insecure direct object reference issue. This allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the issue by...

9.8CVSS6.7AI score0.00789EPSS
SaveExploits2References9
RedhatCVE
RedhatCVE
added 2025/12/21 2:30 p.m.19 views

CVE-2025-7733

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'csupdateapplicationstatuscallback' due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS6AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/20 1:47 p.m.34 views

CVE-2025-7733 WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'csupdateapplicationstatuscallback' due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00178EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/20 1:47 p.m.6 views

CVE-2025-7733 WP JobHunt <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'csupdateapplicationstatuscallback' due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS5.6AI score0.00178EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/20 1:47 p.m.19 views

CVE-2025-7733

CVE-2025-7733 affects the WP JobHunt WordPress plugin (up to 7.7) via Insecure Direct Object Reference in the cs_update_application_status_callback, caused by missing validation on a user-controlled key. This allows authenticated users with Candidate-level access and above to send a site-generate...

4.3CVSS5.6AI score0.00178EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/19 12:24 p.m.9 views

CVE-2025-14881 Insecure direct object reference

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...

7CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder