CVE-2024-49808: Incorrect Authorization

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions...

CVE-2025-32227

Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through = 3.0.0...

CVE-2025-32275

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

CVE-2025-32275

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker allows Identity Spoofing. This issue affects Survey Maker: from n/a through 5.1.5.4...

CVE-2025-32275

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

CVE-2025-32227

Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through = 3.0.0...

CVE-2025-32275

CVE-2025-32275 is an authentication bypass in the WordPress plugin Survey Maker . The vulnerability is listed as an Unauthenticated Authorization Bypass affecting Survey Maker versions up to at least 5.1.5.7 (initial doc lists up to 5.1.5.4; Wordfence integration shows 5.1.5.7). The entry indicat...

CVE-2025-32275 WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

CVE-2025-32227

CVE-2025-32227 is an Authenticated Authorization Bypass in Asgaros Forum. The Wordfence entry lists Asgaros Forum

CVE-2025-32227 WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through = 3.0.0...

CVE-2025-32227 WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through = 3.0.0...

PT-2025-15961

Name of the Vulnerable Software and Affected Versions: Ays Pro Survey Maker versions n/d through 5.1.5.4 Description: The issue allows identity spoofing due to an authentication bypass by spoofing vulnerability. Recommendations: For versions n/d through 5.1.5.4, update to a version later than...

CVE-2025-32227: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This issue affects Asgaros Forum: from n/a through = 3.0.0...

CVE-2025-32275: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

PT-2025-15951 · Unknown · Asgaros Forum

Name of the Vulnerable Software and Affected Versions: Asgaros Forum versions 3.0.0 and earlier Description: The issue allows Identity Spoofing through an Authentication Bypass by Spoofing vulnerability. Recommendations: For Asgaros Forum versions 3.0.0 and earlier, update to a version that fixes...

WordPress plugin Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Security Bulletin: IBM Security Directory Suite is vulnerable to multiple issues

Summary Multiple Security Vulnerabilities in the IBM Security Directory Suite have been addressed by code updates and updating the relevant components. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are...

Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related IBM WebSphere Application Server Liberty and FasterXML jackson-databind

Summary Vulnerabilities in IBM WebSphere Application Server Liberty and FasterXML jackson-databind such as HTTP header injection, identity spoofing, denial of service may affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2022-34165 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0...

CVE-2025-2495

Stored Cross-Site Scripting XSS in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to upload XML files to the server with JavaScript code injected via the ‘/softdial/scheduler/save.php’ resource. The injected code will execute when the uploaded file is loaded via the...

Sytel Softdial Contact Center（Sytel SCC） 跨站脚本漏洞

Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A cross-site scripting vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from /softdial/scheduler/save.php resource-storage-based cross-site scripting that could lead to...