CVE-2026-35678

Отчет об исследовании уязвимости: Небезопасная прямая ссылка на объект IDOR во всех Eduplus Student ERP Исследователь: Винай Шарма 1. Краткое резюме В данном отчете описывается уязвимость высокой степени серьезности, обнаруженная в платформе Eduplus Student ERP, в частности в студенческом портале...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

Danswer - Insecure Direct Object Reference

The application does not verify whether the attacker is the creator of the file, allowing the attacker to directly call the GET /api/chat/file/fileid interface to view any user's file. id: CVE-2024-9617 info: name: Danswer - Insecure Direct Object Reference author: s4e-io severity: medium...

Tiredful-API

ما هي Tiredful API؟ Tiredful API هي تطبيق ويب معطوب عن قصد. الهدف من هذا التطبيق هو تعليم المطورين، واختبار الجودة، ومتخصصي الأمان عن الثغرات الموجودة في خدمات الويب REST API الناتجة عن ممارسات الترميز غير الآمنة. من يمكنه استخدام Tiredful API؟ مطورو الويب مختبرو الاختراق للويب متخصصو الأمان الطل...

CVE-2022-30190

CVE-2022-30190 Microsoft Office Word Rce 再現 CVE-2022-30190 脆弱性の概要 MS Office の docx ファイルには、HTML ファイルとして外部 OLE オブジェクト参照が含まれる可能性があります。ms-msdt: という HTML シナリオが存在し、msdt 診断ツールを呼び出して、任意のコードを実行できます（パラメータで指定）。 結果として、悪意のある docx ファイルを開くだけで（マクロを使用せずに）RCE を獲得できる恐ろしい攻撃ベクトルとなります。 再現開始 Twitter で @naosec...

CVE-2024-11318

CVE-2024-11318 IDOR - Угон пользователей AbsysNet 2.3.1 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Этот инструмент предназначен для помощи в выявлении и эксплуатации уязвимости CVE-2024-11318 в приложениях. Он предназначен для использования специалистами по кибербезопасности, исследователями и тестировщиками на...

EUVD-2026-66763

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases...

Follina_MSDT_CVE-2022-30190

Microsoft は、「Word などの呼び出し元アプリケーションが URL プロトコルを使用して MSDT...

CVE-2017-11317-auto-exploit-

Vulnerabilità CVE-2017-11317 . https://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference...

CVE-2026-3235

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2026-78466

...

EUVD-2026-64785

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78278

Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...

CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

GHSA-MPMW-F6H6-3G26 Winter: My Account preview exposes another backend user's profile by record ID

Impact Backend\Controllers\MyAccount, introduced in v1.2.13, declares an empty $requiredPermissions array so that any authenticated backend user can manage their own account. It implements the FormController behavior, which exposes three routable actions — create, update and preview — that each...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-76634 WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php

WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an idpessoa parameter through a request extraction function that overwrites the session-derived...

CVE-2026-55519 Snipe-IT: Improper Authorization in File Deletion (IDOR)

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an authenticated user with generic asset edit permission can delete files attached to assets outside the user's ownership or company assignment. The destroy methods in app/Http/Controllers/Api/UploadedFilesController.php and...

CVE-2026-75951

Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference multiple frontend/API actions in J-BusinessDirectory 6.2.3...

CVE-2026-75951

J-BusinessDirectory extension (versions before 6.2.3) contains an Insecure Direct Object Reference flaw across multiple frontend/API actions, allowing unauthenticated remote attackers to access or modify other users' data; CVSS 6.9 (Medium). Remediation is to upgrade to version 6.2.3 or later. No...