CVE-2026-8237 Concrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint

Concrete CMS 9.5.0 and below is vulnerable to IDOR. The /ccm/frontend/conversations/messagedetail endpoint returns the full content of any conversation message. An unauthenticated attacker can enumerate all conversation messages, including messages from restricted pages, member-only areas, and th...

EUVD-2005-1132

Malware in sbrugna...

CVE-2021-25375

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment...

Open-Xchange: IDOR - Downloading all attachements if having access to a shared link

Hello, I have found that one can download all attachements if finds/has access to a public link in this POC a shared task link. This is a big issue as one can download all the attachements of registered users, while the attacker is not actually logged in the application ! Also, I have found anoth...