CVE-2025-51867

creationtimestamp| type| source ---|---|--- 2025-07-22 14:14:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114897300314900979 2026-09-18 04:00:07+00:00| seen| Telegram/oqXaBwTi6Fg-urL6JiaHMAuWzycv3JoHm2YPgwQoARpyoZQ 2026-09-19 00:00:38+00:00| published-proof-of-concept|...

CVE-2025-51867

Insecure Direct Object Reference IDOR vulnerability in Deepfiction AI deepfiction.ai thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint...