30744 matches found
CVE-2025-40660 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/select node/data.asp?mode=catalogue&id1=1&id2=1session=&cod=1&networks=0...
CVE-2025-40660
CVE-2025-40660 describes an IDOR in DM Corporative CMS. An attacker can access a private area by setting option to 0, 1, or 2 in /administer/select node/data.asp (parameters include mode, id1, id2, session, cod, networks). Multiple connected sources confirm the vulnerability core: insecure direct...
CVE-2025-40659 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp...
CVE-2025-40659
DM Corporative CMS is affected by an Insecure Direct Object Reference (IDOR) in the endpoint /administer/selectionnode/framesSelectionNetworks.asp, caused by insufficient access control when the option parameter is set to 0, 1, or 2. The vulnerability lets an attacker access the private area data...
CVE-2025-40659 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelectionNetworks.asp...
CVE-2025-40658 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp...
CVE-2025-40658
DM Corporative CMS is affected by an Insecure Direct Object Reference (IDOR) vulnerability. The flaw occurs in the endpoint /administer/selectionnode/framesSelection.asp where an attacker can set the option parameter to 0, 1, or 2 to access a private area. Impact details indicate exposure of sens...
CVE-2025-40658 Insecure Direct Object Reference (IDOR) vulnerability in DM Corporative CMS
An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area setting the option parameter equal to 0, 1 or 2 in /administer/selectionnode/framesSelection.asp...
Dmacroweb DM Corporative CMS 安全漏洞
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from an insecure direct object reference vulnerability, which stems from the failure of the option parameter in the file /administer/selectionnode/framesSelection.a...
PT-2025-24643 · Unknown · Dm Corporative Cms
Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area by setting the optio...
Dmacroweb DM Corporative CMS 安全漏洞
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from an insecure direct object reference vulnerability, which stems from the failure of the option parameter in the file...
PT-2025-24644 · Unknown · Dm Corporative Cms
Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area by setting the optio...
PT-2025-24642 · Unknown · Dm Corporative Cms
Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area by setting the optio...
PT-2025-24645 · Unknown · Dm Corporative Cms
Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area by setting the optio...
SUSE-SU-2025:20379-1 Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - Updated to 12.5.2: CVE-2025-22247: Fixed insecure file handling bsc1243106 - Fixed gcc15 compile time error bsc1241938...
CVE-2025-20276
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...
CVE-2025-20275
A vulnerability in the file opening process of Cisco Unified Contact Center Express Unified CCX Editor could allow an unauthenticated attacker to execute arbitrary code on an affected device. This vulnerability is due to insecure deserialization of Java objects by the affected software. An attack...
GHSA-QX7G-FX8Q-545G Para Inserts Sensitive Information into Log File for Facebook authentication
CWE ID: CWE-532 Insertion of Sensitive Information into Log File CVSS: 6.2 Medium Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Component: Facebook Authentication Logging Version: Para v1.50.6 File Path:...
GHSA-C42H-56WX-H85Q laravel-auth0 SDK Deserialization of Untrusted Data vulnerability
Overview The laravel-auth0 SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I Affected?...