sessionprobe

SessionProbe 🚀⚡ SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. SessionProbe deduplicates URL...

Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7.2 and 27.2, as well as Apple iPadOS versions prior to 26.7.2 and 27.2. These vulnerabilities stem from authorization issues and may allow applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to 27.2, and Apple watchOS versions prior to 27.2. This vulnerability stems fr...

Apple iOS security vulnerabilities

Security vulnerabilities exist in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, Apple tvOS versions prior to 27....

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from improper state management leading to authorization issues, which may allow attackers...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from authorization issues and improper state management, potentially allowi...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

Apple iOS Security Vulnerabilities

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have security vulnerabilities. These vulnerabilities stem from authorization issues, which may allow applications to initiate calls or send messages...

Oracle Communications Billing and Revenue Management Authorization Issues Vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This issue stems from problems with the BRM Server component. It may allow unauthorized attackers to access the network via HTTP, thereby enabling them to...

Oracle Siebel CRM End User Authorization Vulnerability

Oracle Siebel CRM End User versions 17.0 to 26.9 have authorization issues. This vulnerability stems from Open UI components, allowing unauthorized attackers to access through the HTTP network and perform unauthorized updates, insertions, or deletions on certain accessible data...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a vulnerability related to authorization. This vulnerability stems from the notification module exposing PATCH and DELETE REST endpoints that directly operate on the underlying MongoDB collections. No verification is performed t...

Apple VisionOS Authorization Issues Vulnerability

Versions of Apple VisionOS prior to version 27 have a vulnerability related to authorization issues. This vulnerability may allow applications to access sensitive user data...

YITH WooCommerce Product Bundles Authorization Issues Vulnerability

YITH WooCommerce Product Bundles 2.29.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from the lack of an authorization check, which may allow attackers to exploit incorrectly configured access control levels...

IBM i Authorization Issues Vulnerabilities

Versions of IBM i such as 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper validation of transaction identifiers provided to attackers, which could allow unauthorized remote attackers to manipulate distributed transactions...

WordPress MapSVG Authorization Issues Vulnerability

WordPress MapSVG versions 8.16.1 and earlier have a vulnerability related to authorization issues. This vulnerability arises due to a lack of authorization, which may lead to the retrieval of sensitive data embedded within the content...

WordPress YITH PayPal Express Checkout for WooCommerce: Authorization Issues Vulnerability

WordPress YITH PayPal Express Checkout for WooCommerce 1.61.0 and earlier versions have a licensing issue vulnerability. This vulnerability stems from the lack of proper authorization, allowing unauthorized access or sensitive information leakage due to improperly configured access control levels...

WordPress FluentCart: A New Era of eCommerce – Authorization Issues and Vulnerabilities

WordPress FluentCart: A New Era of E-commerce. Versions 1.7.0 and earlier have vulnerabilities related to authorization. This vulnerability stems from the lack of user-controlled validation for the orderid, billingaddressid, and shippingaddressid parameters. Unsafe direct object references allow...

WordPress Photo Engine (Media Organizer & Lightroom) Authorization Issues Vulnerability

WordPress Photo Engine Media Organizer & Lightroom versions 6.5.6 and earlier have a vulnerability related to authorization. This vulnerability arises from the plugin’s failure to properly verify whether the user has the necessary permissions to perform certain actions. Additionally, the protecti...

IBM i Authorization Issues Vulnerabilities

Versions of IBM i 7.3, 7.4, 7.5, and 7.6 have authorization-related vulnerabilities. These vulnerabilities stem from improper execution of the boot version flag, which may allow local attackers to bypass NFS version restrictions...

WordPress Knowledge Base: Authorization Issues Vulnerabilities

WordPress Knowledge Base 3.2.0 and earlier versions have a vulnerability related to authorization. This vulnerability stems from insufficient authorization settings, allowing attackers to exploit incorrect access control security levels to gain access...