EUVD-2024-44150

Malicious code in bioql PyPI...

EUVD-2024-44151

Malicious code in bioql PyPI...

CVE-2024-4538

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data...

CVE-2024-4537

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket...

CVE-2024-4538 IDOR vulnerability in Janto Ticketing Software

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data...

CVE-2024-4538

CVE-2024-4538 is an IDOR vulnerability in Janto Ticketing Software, affecting version 4.3r10. The issue allows a remote attacker to obtain a user’s event ticket by crafting a request using the ticket reference ID, resulting in exposure of sensitive user data. The provided metrics indicate a CVSS ...

CVE-2024-4537 IDOR vulnerability in Janto Ticketing Software

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket...

CVE-2024-4537

CVE-2024-4537 describes an IDOR vulnerability in Janto Ticketing Software version 4.3r10. The issue could allow a remote attacker to obtain another user’s download URL to access purchased tickets, indicating a potential confidentiality impact. Server-side access control appears insufficient to pr...

CVE-2024-4537 IDOR vulnerability in Janto Ticketing Software

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket...

CVE-2024-4538: Authorization Bypass Through User-Controlled Key

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data...

PT-2024-31588

Name of the Vulnerable Software and Affected Versions Janto Ticketing Software version 4.3r10 Description The issue allows a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data. This is due to an...

PT-2024-31584

Name of the Vulnerable Software and Affected Versions Janto Ticketing Software version 4.3r10 Description The issue allows a remote user to obtain the download URL of another user, potentially enabling them to access purchased tickets. Recommendations For Janto Ticketing Software version 4.3r10, ...

CVE-2024-4537: Authorization Bypass Through User-Controlled Key

IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket...