EUVD-2024-38503

Malicious code in bioql PyPI...

CVE-2024-40531

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

CVE-2024-40530

A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header...

CVE-2024-40530: Incorrect Authorization

A vulnerability in Pantera CRM versions 401.152 and 402.072 allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header...

PT-2024-28901 · Unknown · Pantera Crm

Name of the Vulnerable Software and Affected Versions: Pantera CRM versions 401.152 through 402.072 Description: A mass assignment issue exists, allowing authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

CVE-2024-40531: Improper Access Control

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

PT-2024-28900

Name of the Vulnerable Software and Affected Versions Pantera CRM versions 401.152 through 402.072 Description The issue allows unauthorized attackers to bypass IP-based access controls by manipulating the X-Forwarded-For header, potentially enabling them to execute arbitrary code. Recommendation...