CVE-2026-82978

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

CVE-2026-68485

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

CVE-2026-68485

An authorization bypass in the website-index.php component of Revive Adserver 6.0.8 and earlier allows authenticated managers restricted to a single agency to view listings for other agencies. This is caused by the application using the agencyid request parameter to determine the scope of the lis...

CVE-2026-68485

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

EUVD-2026-123618

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

CVE-2026-82978

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

CVE-2026-82978

An authorization bypass exists in the channel-edit.php component of Revive Adserver version 6.0.8 and earlier . The vulnerability allows an authenticated manager to create a delivery rule set belonging to a different agency by manipulating the agencyid parameter. This occurs because the server tr...

EUVD-2026-123630

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

CVE-2026-68485

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

CVE-2026-82978

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

PT-2026-145305

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

CVE-2026-82978: Revive Adserver: An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to…

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

CVE-2026-68485: Revive Adserver: An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager…

An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to view another agency's website listing by changing the agencyid request parameter. Disclosed information includes website names, identifiers and timestamps...

PT-2026-145309

An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to create a delivery rule set belonging to another agency by changing the submitted agencyid parameter. The server trusts the submitted agency identifier when inserting the new rule se...

Unfixed XSS vulnerability at www.icrimewatch.net

Security researcher SnS, has submitted on 06/04/2008 a cross-site-scripting XSS vulnerability affecting www.icrimewatch.net, which at the time of submission ranked 260822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/04/2008. It is current...