4157 matches found
CVE-2024-13063
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2024-13063
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2024-13063 IDOR in Akinsoft's MyRezzta
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2024-13063
Summary: CVE-2024-13063 affects Akinsoft MyRezzta (web application). An authorization bypass via a user-controlled key enables forceful browsing (IDOR) against the product. The vulnerability’s affected range is stated as MyRezzta versions from s2.02.02 before v2.05.01; upgrading to v2.05.01 or ne...
CVE-2024-13063 IDOR in Akinsoft's MyRezzta
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
PT-2025-35700
Name of the Vulnerable Software and Affected Versions: Akinsoft MyRezzta versions s2.02.02 through v2.05.00 Description: An authorization bypass exists in Akinsoft MyRezzta due to a user-controlled key, allowing for forceful browsing. Recommendations: Update Akinsoft MyRezzta to version 2.05.01 o...
PT-2025-35715
Name of the Vulnerable Software and Affected Versions: Akinsoft LimonDesk versions s1.02.14 through s1.02.16 Description: An origin validation error exists in Akinsoft LimonDesk, allowing for forceful browsing. Recommendations: Update Akinsoft LimonDesk to version 1.02.17 or later...
Akinsoft MyRezzta 安全漏洞
Akinsoft MyRezzta is an online food ordering system from Akinsoft Turkey. Akinsoft MyRezzta versions prior to s2.02.02 to v2.05.01 contain a security vulnerability that originates from an authorization bypass due to a user control key, which could lead to forced browsing...
LimonDesk 访问控制错误漏洞
LimonDesk is a real-time chat, work order ticketing, and other features from LimonDesk, a Turkish company. An access control error vulnerability exists in LimonDesk s1.02.14 through versions prior to v1.ylabel17, which stems from a source validation error that could lead to forced browsing...
CVE-2024-13068: Origin Validation Error
Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-13063: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...
CVE-2024-12973
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12973
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
PT-2025-35549
Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through v1.11.00 Description: An origin validation error exists in Akinsoft OctoCloud, enabling HTTP response splitting. This issue is categorized as CAPEC - 87 - Forceful Browsing. Recommendations: Update...
CVE-2024-12973: Origin Validation Error
Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...
CVE-2024-12924
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...
CVE-2024-12924
CVE-2024-12924 describes an open redirect vulnerability in Akınsoft QR Menü. Affected versions are s1.05.05 up to v1.05.12 (prior to 1.05.12). The root cause is improper handling of target jumps, enabling an attacker to redirect victims to arbitrary websites (phishing/forceful browsing). The CVSS...
CVE-2024-12924 Open Redirect in Akinsoft's QR Menu
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Akınsoft QR Menü allows Forceful Browsing, Phishing. This issue affects QR Menü: from s1.05.05 before v1.05.12...