Lucene search
+L

45 matches found

NVD
NVD
•added 2026/10/08 12:17 p.m.•12 views

CVE-2026-19083

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS0.00246EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 11:32 a.m.•24 views

EUVD-2026-94852

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS5.7AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 11:32 a.m.•43 views

CVE-2026-19083 IDOR in AKIN Software's OctoCloud

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/08 11:32 a.m.•12 views

CVE-2026-19083 IDOR in AKIN Software's OctoCloud

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 11:32 a.m.•17 views

CVE-2026-19083

The OctoCloud software developed by AKIN Software Computer Import-Export Industry and Trade Co. Ltd. is vulnerable to an authorization bypass (CWE-639) caused by a User-Controlled key vulnerability. This flaw allows an attacker to access functionality that is not properly constrained by Access Co...

8.8CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•15 views

PT-2026-107895

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS5.7AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•11 views

CVE-2026-19083: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects OctoCloud: from 1.12.06 before 1.12.07...

8.8CVSS5.7AI score0.00246EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/09/08 9:31 p.m.•5 views

@fox-hound-tools/protobuf-grpc-json-transcoding (>=0.70.0, <=0.71.0), @octocloud/typespec (>=0.1.16, <=0.1.37) potentially affected by unknown CVE via @typespec/openapi3 (>=1.0.0, <=1.7.0)

@typespec/openapi3 NPM version =1.0.0, =0.70.0, =0.1.16, =0.1.37 Source cves: unknown CVE Source advisory: GHSA-2Q42-4Q24-7RGV...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/09/04 12:30 p.m.•30 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS5.8AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/04 12:30 p.m.•33 views

CVE-2025-2414

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass.This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS5.8AI score0.00346EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/04 12:30 p.m.•38 views

CVE-2025-0640

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

4.7CVSS5.8AI score0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/04 12:30 p.m.•33 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00147EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/04 12:00 a.m.•25 views

Akinsoft OctoCloud Source Validation Error Vulnerability

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A source validation error vulnerability exists in versions prior to Akinsoft OctoCloud s1.09.01 through v1.11.01,...

4.7CVSS6.8AI score0.00147EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/04 12:00 a.m.•30 views

Akinsoft OctoCloud Cross-Site Scripting Vulnerability

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. Cross-site scripting vulnerability exists in Akinsoft OctoCloud versions prior to s1.09.01 through v1.11.01, no...

4.3CVSS5.7AI score0.0019EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/04 12:00 a.m.•26 views

Akinsoft OctoCloud Security Bypass Vulnerability (CNVD-2025-20765)

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A security bypass vulnerability exists in Akinsoft OctoCloud versions prior to s1.09.03 through v1.11.01, which can...

8.6CVSS5.7AI score0.00346EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/04 12:00 a.m.•31 views

Akinsoft OctoCloud Security Bypass Vulnerability

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. Akinsoft OctoCloud versions prior to s1.09.02 through v1.11.01 contain a security bypass vulnerability that can be...

4.7CVSS5.8AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/02 12:15 p.m.•24 views

CVE-2025-2414

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypass. This issue affects OctoCloud: from s1.09.03 before v1.11.01...

8.6CVSS0.00346EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/02 12:15 p.m.•23 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00147EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/02 12:15 p.m.•20 views

CVE-2025-0640

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

4.7CVSS0.00239EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/02 12:15 p.m.•22 views

CVE-2024-12972

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.3CVSS0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder