4623 matches found
CVE-2025-6585: Improper Input Validation
The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.2 via the csremoveprofilecallback function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level...
PT-2025-30418 · Unknown · Deepfiction Ai
Name of the Vulnerable Software and Affected Versions: Deepfiction AI versions prior to June 3, 2025 Description: An Insecure Direct Object Reference IDOR vulnerability exists in Deepfiction AI. This allows attackers to access and utilize other users' credits for interacting with the Large Langua...
CVE-2025-51867
Insecure Direct Object Reference IDOR vulnerability in Deepfiction AI deepfiction.ai thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint...
PT-2025-30423 · Unknown · Ai2 Playground Web Service
Name of the Vulnerable Software and Affected Versions: Ai2 playground web service versions prior to 2025-06-04 Description: The Ai2 playground web service is susceptible to an Insecure Direct Object Reference IDOR issue. This allows attackers to access sensitive information by enumerating thread...
PT-2025-30378 · WordPress · Wp Jobhunt
Name of the Vulnerable Software and Affected Versions: WP JobHunt versions prior to 7.3 Description: The WP JobHunt plugin for WordPress is susceptible to an Insecure Direct Object Reference issue in all versions up to and including 7.2, specifically within the cs remove profile callback function...
PT-2025-30420 · Telegai · Telegai
Name of the Vulnerable Software and Affected Versions: TelegAI versions through 2025-05-26 Description: An Insecure Direct Object Reference IDOR vulnerability exists in the chat component of TelegAI. This allows an attacker to tamper with other users' conversations. Additionally, malicious conten...
CVE-2025-51865
Ai2 playground web service playground.allenai.org LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference IDOR, allowing attackers to gain sensitvie information via enumerating thread keys in the URL...
CVE-2025-7899: Authorization Bypass Through User-Controlled Key
The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0...
CVE-2025-51865
Ai2 playground web service playground.allenai.org LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference IDOR, allowing attackers to gain sensitvie information via enumerating thread keys in the URL...
CVE-2025-51867
Deepfiction AI (deepfiction.ai) versions prior to June 3, 2025 , are vulnerable to an Insecure Direct Object Reference (IDOR) (CWE-639). The issue stems from the /browse/stories endpoint exposing sensitive id and author_id fields, which map directly to the treatment_id and user_id parameters used...
CVE-2025-51865
The Ai2 playground web service (playground.allenai.org) is vulnerable to an Insecure Direct Object Reference (IDOR) in its LLM chat component (versions prior to 2025-06-04 ). The root cause is a failure to distinguish ownership or sharing status for conversation histories, which are stored on the...
CVE-2025-51862
Insecure Direct Object Reference IDOR vulnerability in TelegAI telegai.com thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and...
CVE-2025-51862
TelegAI (telegai.com) is vulnerable to an Insecure Direct Object Reference (IDOR) in its chat component (versions through 2025-05-26). The root cause lies in the conversation API (https://ywqesktuqvgsmgraors.supabase.co/functions/v1/chat), which relies on the profile_id field for authorization. B...
PT-2025-30395 · Typo3 · Femanager
Name of the Vulnerable Software and Affected Versions: femanager versions 6.4.1 and below femanager versions 7.0.0 through 7.5.2 femanager versions 8.0.0 through 8.3.0 Description: The femanager extension for TYPO3 contains an Insecure Direct Object Reference issue, which allows unauthorized...
WordPress plugin WP JobHunt has a vulnerability related to input validation errors.
WordPress WP JobHunt plugin is a companion theme to the WP Job Manager plugin, designed for creating professional job boards. The WordPress WP JobHunt plugin suffers from an input validation error vulnerability that stems from a lack of user control key validation in the csremoveprofilecallback...
TelegAI cross-site scripting vulnerabilities
TelegAI is an AI chatbot website from TelegAI, Inc. A cross-site scripting vulnerability exists in TelegAI versions 2025-05-26 and earlier, which stems from an insecure direct object reference that could lead to tampering with other users' conversations and injecting malicious content...
TYPO3 Manager security vulnerabilities
TYPO3 femanager is a TYPO3 extension to the TYPO3 open source. A security vulnerability exists in TYPO3 femanager versions 6.4.1 and earlier, 7.0.0 to 7.5.2, and 8.0.0 to 8.3.0, which stems from an insecure direct object reference that could lead to unauthorized modification of user data...
TYPO3 Powermail security vulnerabilities
TYPO3 powermail is a mail form extension for TYPO3 open source. A security vulnerability exists in TYPO3 powermail versions 12.0.0 through 12.5.2 and 13.0.0, which stems from an insecure direct object reference that could lead to the download of arbitrary files from a web server...
Ai2 Playground security vulnerabilities
Ai2 Playground is an AI macromodeling website from Ai2 Playground, Inc. A security vulnerability exists in Ai2 Playground versions 2025-06-03 and earlier, which stems from an insecure direct object reference that could lead to access to sensitive information...
