WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Radius Blocks versions = 2.2.1...

CVE-2025-3014

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3014

The CVE-2025-3014 entry concerns NightWolf Penetration Testing Tracking version 2.1.4, where an Improper Access Control leads to Insecure Direct Object References (IDOR). The vulnerability arises from allowing manipulation of request parameters or object references to access unauthorized data. Pu...

CVE-2025-3014 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

CVE-2025-3013

CVE-2025-3013 affects NightWolf Penetration Testing Customer Portal prior to 2.1.4 (NightWolf Penetration Platform). The issue is an Insecure Direct Object References (IDOR) in access control, enabling an attacker to access by manipulating request parameters or object references. According to the...

CVE-2025-3013 Insecure direct object references (IDOR) in NightWolf Penetration Platform

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

NightWolf Penetration Testing Tracking 安全漏洞

NightWolf Penetration Testing Tracking is a NightWolf system for tracking and managing the progress and results of NightWolf Penetration Testing projects. A security vulnerability exists in NightWolf Penetration Testing Tracking version 2.1.4, which stems from improper access control and could le...

NightWolf Penetration Testing Customer Portal 安全漏洞

NightWolf Penetration Testing Customer Portal is an online platform designed specifically for customers of NightWolf, Inc. A security vulnerability exists in NightWolf Penetration Testing Customer Portal versions prior to 2.1.4 that stems from improper access control and could lead to unsafe dire...

PT-2025-13649 · Unknown · Customer Portal

Name of the Vulnerable Software and Affected Versions: Customer Portal versions prior to 2.1.4 Description: The issue is related to Insecure Direct Object References IDOR in access control, allowing an attacker to access sensitive information by manipulating request parameters or object reference...

PT-2025-13650 · Tracing · Tracing

Name of the Vulnerable Software and Affected Versions: Tracking version 2.1.4 Description: The issue is related to Insecure Direct Object References IDOR in access control, allowing an attacker to access sensitive information by manipulating request parameters or object references. This can be...

DEBIAN-CVE-2022-49761

In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...

USN-7368-1 snakeyaml vulnerability

It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML to crash, resulting in a denial of service...

CVE-2025-30777 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...

WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by astra.r3verii in WordPress Plugin Support Genix versions = 1.4.11...

Important: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: net:...

WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack

Impact A vulnerability was found in OIDC-Client. When using the elytron-oidc-client subsystem with WildFly, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is...

RHEL 8 : tigervnc (RHSA-2025:2880)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2880 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...

RHEL 8 : tigervnc (RHSA-2025:2866)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2866 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine...