X (Formerly Twitter): [IDOR][translate.twitter.com] Opportunity to change any comment at the forum

POC: https://translate.twitter.com/forum/getting-started/topics/7037/posts/43287/edit Steps to reproduce: 1 Go to any forums topic for example: https://translate.twitter.com/forum/getting-started/topics/7037 2 View source code of the page and take post id screenshot "idor edit.jpg" 3 Append...

InVision: CRITICAL Any █████ of any screen can be removed by anyone!

Summary ------- This is an IDOR bug which allows to remove ██████ of other users. Steps to reproduce ------ 1. Make sure you have two accounts A and B 2. On account A create a ███ on a screen and remember its ID, let's say it was 12345678 3. With account B create a ██████████ on a screen, let's s...

Yelp: IDOR(indirect object references) on add friend,complement and send message

Hi security , Description: I found user id in encrypted form from there profile url https://www.yelp.com/userdetails?userid= on intercepting request of add friend, complement and send message i can identify user id .. when i change identified user ID to other user's ID then request of add friend ...

Harvest: Invoices can be added to any retainers - even closs-platform

Summary ------ Hey team, there is an IDOR bug, which allows me to add an invoice to any retainer I wish, even if the retainer belongs to another app/subdomain. Steps to reproduce --------- 1. Make sure you have two apps A and B 2. In A create a retainer, let's say it has id 1234. 3. In B open thi...

GitLab: Boards leak private label names and desciptions

Vulnerability details In anticipation of today's release, I took a look at the new boards feature - which, unrelated to this report, is awesome! There turns out to be an IDOR vulnerability when creating a list based on a label. An attacker can create a list with a label ID that belongs to a priva...

Ubiquiti Inc.: IDOR Causing Deletion of any account

The researcher demonstrated how to close other users account, using a IDOR in community.ubnt.com he was able to delete all data in others account using the user id number of the victim. IDOR in Community.ubnt.com :500$ Created two user:-- Attacker with username:--vibhuti123i Victim:-- Johnvictim...

Shopify: Delete/modify your own comment after limited access(IDOR)

Hi Team, Description : When user has access to some feature like orders , Transfer etc. where comment section is available. Suppose staff members comments in it . Now owner of the account limited access to orders , then he won't be able to access his comments and he won't be able to modify/delete...

Dashlane: Missing Access Control(IDOR) To Know LinkedAccounts

Hello Team, While Digging your Application I Came to Endpoint Where I Was Able to Check Whether Email is been Used in Multiple Account's or not , And Also Email's Are Getting Leaked . You have Feature to Enter Email To get Token : F105969 As you can see from the above Screenshot , I'm Logged in a...

Verizon mailbox now wonderful vulnerability, personal mail can be forwarded to any mailbox-vulnerability warning-the black bar safety net

Verizon is America's Big Three telecommunications giants. A recent Verizon security personnel found the Verizon mailbox system there is a high risk vulnerability can lead to a Verizon mailbox user's mail is any forwarding to other mailbox accounts. Below this screenshot is a Verizon mailbox of a...

Verizon appears again seriously flawed, resulting in email accounts compromised-the vulnerability warning-the black bar safety net

I used to and Verizon cooperation many times,are in the event of a serious security vulnerability,including in the MyFiOS application of the API in a fatal vulnerability,the vulnerability will reveal all the user's e-mail account. Recently in my research Verizon webmail portal,I found that the...

Pornhub: [IDOR] Deleting other users comment

Hello, Normally you cannot delete comments if you post on someones stream and i have found a way to delete others comment. PoC: https://youtu.be/mxEE9vcxKA Let me know if you cannot reproduce it ! Thanks! Mikko...

Pornhub: [IDOR] post to anyone even if their stream is restricted to friends only

The researcher discovered a way to post to another user's stream even if you are not friends with them...

InVision: CRITICAL : █████████ ██████ ███████. ( IDOR )

Hey! - I found an IDOR vulnerability from which i can █████████ ████████ or any other user's ███████. Steps to Reproduce : "A" Admin & "B" Attacker - 1- Sign in from 2 different accounts A & B in 2 different browsers or use incognito as 2nd browser 2- Now go to "A" account and create a board and...

Bumble: Insecure Direct Object Reference on badoo.com

Hi, I want to report IDOR Insecure Direct Object Reference vulnerability to you. IDOR Details are here: https://www.owasp.org/index.php/Top102010-A4-InsecureDirectObjectReferences https://www.owasp.org/index.php/TestingforInsecureDirectObjectReferences%28OTG-AUTHZ-004%29 As the pages say: Insecur...

Veris: Critical IDOR - Make Rule for Any Group & Any Venue remotely

Hello Team, I have found a critical IDOR vulnerability using which an attacker can make/create a rule for any group and any venue remotely by just changing the groupid and venueid in the request. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get Rules of any organization remotely

Hello Team, I have found a critical IDOR using which an attacker can get rules of any organization remotely by just changing the venue id in GET Request. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Can select any Parent while creating new Venue

Hello Team, I have found a critical IDOR vulnerability which allows an attacker to select any parent while creating a new venue remotely by just changing the "parent" parameter in the request. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get venue data of any organization remotely

Hello Team, I have found a critical IDOR vulnerability which allows an attacker to get venue data of any organization remotely by just changing the venueid. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get Authentication Details of any Terminal/Gatekeeper

Hello Team, I have found a critical IDOR using which an attacker can get authentication details of any gatekeeper/terminal remotely by just changing the value of gatekeeper/terminal id. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Set anyone's Terminal Data remotely

Hello Team, I have found a critical IDOR using which an attacker can SET anyone's terminal data remotely by just changing a terminal/gatekeeper id in PUT Request. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...