WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Radius Blocks versions = 2.2.1...

CVE-2025-3014

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3014

The CVE-2025-3014 entry concerns NightWolf Penetration Testing Tracking version 2.1.4, where an Improper Access Control leads to Insecure Direct Object References (IDOR). The vulnerability arises from allowing manipulation of request parameters or object references to access unauthorized data. Pu...

CVE-2025-3014 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013

CVE-2025-3013 affects NightWolf Penetration Testing Customer Portal prior to 2.1.4 (NightWolf Penetration Platform). The issue is an Insecure Direct Object References (IDOR) in access control, enabling an attacker to access by manipulating request parameters or object references. According to the...

NightWolf Penetration Testing Tracking 安全漏洞

NightWolf Penetration Testing Tracking is a NightWolf system for tracking and managing the progress and results of NightWolf Penetration Testing projects. A security vulnerability exists in NightWolf Penetration Testing Tracking version 2.1.4, which stems from improper access control and could le...

NightWolf Penetration Testing Customer Portal 安全漏洞

NightWolf Penetration Testing Customer Portal is an online platform designed specifically for customers of NightWolf, Inc. A security vulnerability exists in NightWolf Penetration Testing Customer Portal versions prior to 2.1.4 that stems from improper access control and could lead to unsafe dire...

PT-2025-13650 · Tracing · Tracing

Name of the Vulnerable Software and Affected Versions: Tracking version 2.1.4 Description: The issue is related to Insecure Direct Object References IDOR in access control, allowing an attacker to access sensitive information by manipulating request parameters or object references. This can be...

PT-2025-13649 · Unknown · Customer Portal

Name of the Vulnerable Software and Affected Versions: Customer Portal versions prior to 2.1.4 Description: The issue is related to Insecure Direct Object References IDOR in access control, allowing an attacker to access sensitive information by manipulating request parameters or object reference...

CVE-2025-30777 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...

WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by astra.r3verii in WordPress Plugin Support Genix versions = 1.4.11...

WordPress plugin SupportCandy 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. An authorization issue...

CVE-2025-25952

An Insecure Direct Object References IDOR in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request...

CVE-2025-25952

An Insecure Direct Object References IDOR in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request...

CVE-2025-25952

An Insecure Direct Object References IDOR in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request...

CVE-2025-25952

An Insecure Direct Object References IDOR in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request...

CVE-2025-25952

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 is affected by an Insecure Direct Object Reference (IDOR) vulnerability. The flaw exists in the /getStudemtAllDetailsById?studentId=XX component, where an attacker can use a crafted API request to access sensitiv...