83215 matches found
CVE-2025-32982
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...
CVE-2025-32982
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...
CVE-2025-32979
creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13541 2025-04-25 23:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedfju7w2j 2025-04-26 01:52:35+00:00| seen| https://t.me/cvedetector/23789 2025-04-28...
GHSA-34G7-PG9J-PXGP Moodle allows IDOR when accessing the cohorts report
A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...
Incorrect Authorization
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via the cohorts report. An attacker can access unauthorized cohort data by exploiting insufficient access control checks. Remediation Upgrade moodle/moodle to version 4.1.18,...
CVE-2025-3634
creationtimestamp| type| source ---|---|--- 2025-04-25 15:25:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114399295811920995 2025-04-25 17:30:45+00:00| seen| https://t.me/cvedetector/23753 2025-04-25 19:35:04+00:00| seen|...
CVE-2025-3647 Moodle: idor when accessing the cohorts report
A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...
CVE-2025-3647 Moodle: idor when accessing the cohorts report
A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...
CVE-2025-2986
creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13409 2025-04-25 13:19:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncromcw42h 2025-04-25 15:00:29+00:00| seen| https://t.me/cvedetector/23750...
CVE-2025-3912
creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13408 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncrofgdb2g 2025-04-25 15:00:28+00:00| seen| https://t.me/cvedetector/23749...
CVE-2025-2470
creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13406 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncroikpk2a 2025-04-25 13:48:43+00:00| seen|...
GHSA-CPJ6-FHP6-MR6J
creationtimestamp| type| source ---|---|--- 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25 03:30:33+00:00| published-proof-of-concept| Telegram/oGnFJdmXUCqYx0xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY 2025-04-26 05:43:33+00:00| seen|...
CVE-2025-32982
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...
CVE-2025-32982
NETSCOUT nGeniusONE prior to 6.4.0 b2350 is affected by a Broken Authorization Schema in the report module (CVE-2025-32982). The CVE details indicate a high-severity impact (CVSS 3.1: 7.5; Confidentiality impact H, Integrity/Availability none) due to an authorization flaw that could enable unauth...
PT-2025-17931 · Unknown · Filez Client
Name of the Vulnerable Software and Affected Versions: FileZ client affected versions not specified Description: An improper XML parsing issue was reported in the FileZ client, which could allow arbitrary file reads on the system if a crafted URL is visited by a local user. Recommendations: At th...
PT-2025-17940 · Netscout · Ngeniusone
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized...
CVE-2025-32982
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...
CVE-2025-25777
creationtimestamp| type| source ---|---|--- 2025-04-24 23:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnlv7psxpg2d 2025-04-25 00:47:54+00:00| seen| https://t.me/cvedetector/23707 2025-04-25 19:48:21+00:00| seen|...
vesilahti.fi Cross Site Scripting vulnerability OBB-4049113
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
xlmgokong88.com Cross Site Scripting vulnerability OBB-4049112
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...