Lucene search
+L

2005 matches found

Hacker One
Hacker One
added 2020/12/23 9:4 p.m.100 views

h1-ctf: Stopping Grinch to ruin XMas!

Hello, Gonna just submit flags first then will send my write up later tomorrow. flag1: flag48104912-28b0-494a-9995-a203d1e261e7 https://hackyholidays.h1ctf.com/robots.txt recon revealing hidden endpoint flag2: flagb7ebcb75-9100-4f91-8454-cfb9574459f7 https://hackyholidays.h1ctf.com/s3cr3t-ar3a...

SaveExploits0
CVE
CVE
added 2020/12/14 7:42 p.m.47 views

CVE-2020-20183

CVE-2020-20183 affects Zyxel P1302-T10 v3 (firmware

7.5CVSS7.6AI score0.01003EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/14 12:0 a.m.9 views

Zyxel P1302-T10 代码问题漏洞

The Zyxel P1302-T10 is a modem device from China-based Zyxel. A security vulnerability exists in Zyxel s P1302-T10 v3, which stems from an insecure direct object reference vulnerability that can be exploited by an attacker to gain privileges and access to certain administrative pages...

7.5CVSS7.1AI score0.01003EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.30 views

FreeBSD : glpi -- Insecure Direct Object Reference on ajax/comments.ph (190176ce-3b3a-11eb-af2a-080027dbe4b7)

MITRE Corporation reports : In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc.. C Tenable Network Security, Inc. The descriptive text and package checks ...

4.3CVSS5.7AI score0.00685EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/12/14 12:0 a.m.32 views

FreeBSD : glpi -- Insecure Direct Object Reference on ajax/getDropdownValue.php (695b2310-3b3a-11eb-af2a-080027dbe4b7)

MITRE Corporation reports : In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemType e.g., Ticket, Users, etc.. C Tenable Network Security, Inc. The descriptive text and package checks in this...

4.3CVSS5.7AI score0.00858EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2020/12/09 12:0 a.m.470 views

Employee Performance Evaluation System 1.0 Insecure Direct Object Reference

Exploit Title: Employee Performance Evaluation System 1.0 - Able to delete Admin user from Local account Unauthenticated Insecure Direct Object Reference IDOR Date: 09/12/2020 Exploit Author: Manish Solanki Vendor Homepage: https://www.sourcecodester.com Software Link:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/12/03 12:0 a.m.529 views

Sony BRAVIA Digital Signage 1.7.8 Insecure Direct Object Reference

Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass / IDOR Vendor: Sony Electronics Inc. Product web page: https://pro-bravia.sony.net https://pro-bravia.sony.net/resources/software/bravia-signage/ https://pro.sony/ueUS/products/display-software Affected version: =1.7.8 Summary: Sony'...

7.4AI score
SaveExploits0
OSV
OSV
added 2020/11/26 5:15 p.m.28 views

CVE-2020-27663

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemType e.g., Ticket, Users, etc...

4.3CVSS6.5AI score
SaveExploits0References1
NVD
NVD
added 2020/11/26 5:15 p.m.23 views

CVE-2020-27662

In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc...

4.3CVSS4.4AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/26 5:15 p.m.4 views

UBUNTU-CVE-2020-27662

In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc...

4.3CVSS5.8AI score0.00685EPSS
SaveExploits0References4
Prion
Prion
added 2020/11/26 5:15 p.m.23 views

Design/Logic Flaw

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemType e.g., Ticket, Users, etc...

4CVSS4.4AI score0.00858EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/26 4:46 p.m.40 views

CVE-2020-27662

In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc...

4.4AI score0.00685EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2020/10/29 1:14 p.m.13 views

Bug-Bounty Awards Spike 26% in 2020

Cross-site scripting XSS remained the most impactful vulnerability and thus the one reaping the highest rewards for ethical hackers in 2020 for a second year running, according to a list of top 10 vulnerabilities released on Thursday by HackerOne. The vulnerability — which enables attackers to...

0.1AI score
SaveExploits0References4
Prion
Prion
added 2020/10/28 7:15 p.m.15 views

Security feature bypass

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msgconfirmmove template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" threa...

4CVSS6.3AI score0.0115EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/10/28 7:15 p.m.38 views

CVE-2020-27742

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msgconfirmmove template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" threa...

6.5CVSS6.7AI score0.0115EPSS
SaveExploits1References3
CVE
CVE
added 2020/10/28 6:44 p.m.47 views

CVE-2020-27742

CVE-2020-27742 affects Citadel WebCit (through version 926) and is an Insecure Direct Object Reference vulnerability that lets an authenticated remote attacker read someone else’s emails via the msg_confirm_move template. The vulnerability is documented across multiple sources (NVD entry and Red ...

6.5CVSS6.3AI score0.0115EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/10/28 6:44 p.m.23 views

CVE-2020-27742

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msgconfirmmove template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" threa...

6.4AI score0.0115EPSS
SaveExploits1References2
FreeBSD
FreeBSD
added 2020/10/22 12:0 a.m.30 views

glpi -- Insecure Direct Object Reference on ajax/comments.ph

MITRE Corporation reports: In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc...

4.3CVSS2.6AI score0.00685EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2020/10/20 12:0 a.m.3 views

VulnCheck KEV: CVE-2017-11357

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution...

9.8CVSS7.7AI score0.75709EPSS
SaveExploits5References1
NVD
NVD
added 2020/10/05 2:15 p.m.35 views

CVE-2020-8235

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments...

4.3CVSS0.00781EPSS
SaveExploits1References2
Rows per page
Query Builder