Lucene search
+L

4787 matches found

Packet Storm
Packet Storm
added 2024/08/07 12:0 a.m.316 views

AccPack Buzz 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Buzz v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vend...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/07 12:0 a.m.296 views

AccPack Cop 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Cop v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendo...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/08/06 1:15 p.m.6 views

CVE-2024-6357

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

8.8CVSS5.8AI score0.00276EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/06 1:15 p.m.26 views

CVE-2024-6357

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

8.8CVSS0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/06 1:8 p.m.24 views

CVE-2024-6357 Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

6.3CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/06 1:8 p.m.15 views

CVE-2024-6357 Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

6.3CVSS7.2AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/06 1:8 p.m.40 views

CVE-2024-6357

CVE-2024-6357 is an Insecure Direct Object Reference vulnerability in OpenText ArcSight Intelligence. Public records show CVSS v3.1 metrics with high impact (C/H/I/A all high) and network-based access with low attack complexity and no user interaction required. Some connected sources (e.g., PT-20...

8.8CVSS6.9AI score0.00276EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.10 views

OpenText ArcSight Intelligence 安全漏洞

OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an unsafe direct object reference vulnerability...

8.8CVSS6.8AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/08/01 1:56 p.m.11 views

WordPress LearnPress plugin <= 4.2.6.8.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin LearnPress versions = 4.2.6.8.2...

6.5CVSS7AI score0.00393EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/08/01 12:0 a.m.15 views

WordPress LearnPress Plugin <= 4.2.6.8.2 is vulnerable to Insecure Direct Object References (IDOR)

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.8.2 Fixed in 4.2.6.9 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-39642 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 051731ae418f Credits Rafie...

6.5CVSS6.5AI score0.00393EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2024/07/31 12:0 a.m.236 views

AccPack Khanepani 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Khanepani v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | |...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/25 12:0 a.m.290 views

Bhojon Restaurant Management System 2.7 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.7 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/24 12:0 a.m.227 views

Webdenim AppUI 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Webdenim AppUI v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/24 12:0 a.m.281 views

SIM Wisuda 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : SIM Wisuda v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/24 12:0 a.m.370 views

UBM CMS 1.2 Insecure Direct Object Reference

==================================================================================================================================== | Title : UBM CMS v1.2 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
Veracode
Veracode
added 2024/07/23 6:29 a.m.17 views

Insecure Direct Object Reference (IDOR)

org.apache.streampark, streampark is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient access control due to improper handling of authorization tokens, allowing attackers to manually request and view all users' flink information, including executeSQL an...

6.5CVSS6.8AI score0.00728EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2024/07/22 12:0 a.m.252 views

Agop CMS 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Agop CMS v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/22 12:0 a.m.354 views

Clenix 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Clenix v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.1 64 bits | | Vendor :...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/07/19 11:15 a.m.28 views

CVE-2024-5977

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.13.0 via the 'handleRequest' function due to missing validation on a user controlled key. This makes it possible for authenticated...

5.4CVSS0.00428EPSS
SaveExploits0References3
CVE
CVE
added 2024/07/19 11:1 a.m.68 views

CVE-2024-5977

CVE-2024-5977 affects GiveWP – Donation Plugin and Fundraising Platform for WordPress. The vulnerability is an Insecure Direct Object Reference (IDOR) in the handleRequest path, with missing validation on a user-controlled key, enabling authenticated users with GiveWP Worker-level access and abov...

5.4CVSS5.4AI score0.00428EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder