Lucene search
+L

7 matches found

EUVD
EUVD
•added 2026/10/02 12:31 a.m.•18 views

EUVD-2026-91126

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

5.9AI score0.00284EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/01 10:17 p.m.•14 views

CVE-2026-51879

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

9.1CVSS0.00284EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•11 views

CVE-2026-51879: Authorization Bypass Through User-Controlled Key

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

9.1CVSS5.9AI score0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 12:00 a.m.•48 views

CVE-2026-51879

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 12:00 a.m.•15 views

CVE-2026-51879

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

5.9AI score0.00284EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 12:00 a.m.•34 views

CVE-2026-51879

The deeptutor 1.4.0 software contains an authorization bypass vulnerability within the TutorBotManager.write_bot_file function. This flaw allows a remote caller to manipulate a user-controlled object identifier to enumerate bot IDs and overwrite whitelisted control files belonging to other bots v...

9.1CVSS5.9AI score0.00284EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•16 views

PT-2026-104037

Name of the Vulnerable Software and Affected Versions deeptutor version 1.4.0 Description An authorization bypass exists due to a user-controlled object identifier in the write bot file function of TutorBotManager. A remote attacker can enumerate bot IDs and overwrite whitelisted control files of...

9.1CVSS5.9AI score0.00284EPSS
SaveExploits0References6
Rows per page
Query Builder