GitLab: Boards leak private label names and desciptions

Vulnerability details In anticipation of today's release, I took a look at the new boards feature - which, unrelated to this report, is awesome! There turns out to be an IDOR vulnerability when creating a list based on a label. An attacker can create a list with a label ID that belongs to a priva...

Ubiquiti Inc.: IDOR Causing Deletion of any account

The researcher demonstrated how to close other users account, using a IDOR in community.ubnt.com he was able to delete all data in others account using the user id number of the victim. IDOR in Community.ubnt.com :500$ Created two user:-- Attacker with username:--vibhuti123i Victim:-- Johnvictim...

Shopify: Delete/modify your own comment after limited access(IDOR)

Hi Team, Description : When user has access to some feature like orders , Transfer etc. where comment section is available. Suppose staff members comments in it . Now owner of the account limited access to orders , then he won't be able to access his comments and he won't be able to modify/delete...

Dashlane: Missing Access Control(IDOR) To Know LinkedAccounts

Hello Team, While Digging your Application I Came to Endpoint Where I Was Able to Check Whether Email is been Used in Multiple Account's or not , And Also Email's Are Getting Leaked . You have Feature to Enter Email To get Token : F105969 As you can see from the above Screenshot , I'm Logged in a...

Verizon mailbox now wonderful vulnerability, personal mail can be forwarded to any mailbox-vulnerability warning-the black bar safety net

Verizon is America's Big Three telecommunications giants. A recent Verizon security personnel found the Verizon mailbox system there is a high risk vulnerability can lead to a Verizon mailbox user's mail is any forwarding to other mailbox accounts. Below this screenshot is a Verizon mailbox of a...

Verizon appears again seriously flawed, resulting in email accounts compromised-the vulnerability warning-the black bar safety net

I used to and Verizon cooperation many times,are in the event of a serious security vulnerability,including in the MyFiOS application of the API in a fatal vulnerability,the vulnerability will reveal all the user's e-mail account. Recently in my research Verizon webmail portal,I found that the...

Pornhub: [IDOR] Deleting other users comment

Hello, Normally you cannot delete comments if you post on someones stream and i have found a way to delete others comment. PoC: https://youtu.be/mxEE9vcxKA Let me know if you cannot reproduce it ! Thanks! Mikko...

Pornhub: [IDOR] post to anyone even if their stream is restricted to friends only

The researcher discovered a way to post to another user's stream even if you are not friends with them...

InVision: CRITICAL : █████████ ██████ ███████. ( IDOR )

Hey! - I found an IDOR vulnerability from which i can █████████ ████████ or any other user's ███████. Steps to Reproduce : "A" Admin & "B" Attacker - 1- Sign in from 2 different accounts A & B in 2 different browsers or use incognito as 2nd browser 2- Now go to "A" account and create a board and...

Bumble: Insecure Direct Object Reference on badoo.com

Hi, I want to report IDOR Insecure Direct Object Reference vulnerability to you. IDOR Details are here: https://www.owasp.org/index.php/Top102010-A4-InsecureDirectObjectReferences https://www.owasp.org/index.php/TestingforInsecureDirectObjectReferences%28OTG-AUTHZ-004%29 As the pages say: Insecur...

Veris: Critical IDOR - Make Rule for Any Group & Any Venue remotely

Hello Team, I have found a critical IDOR vulnerability using which an attacker can make/create a rule for any group and any venue remotely by just changing the groupid and venueid in the request. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get Rules of any organization remotely

Hello Team, I have found a critical IDOR using which an attacker can get rules of any organization remotely by just changing the venue id in GET Request. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Can select any Parent while creating new Venue

Hello Team, I have found a critical IDOR vulnerability which allows an attacker to select any parent while creating a new venue remotely by just changing the "parent" parameter in the request. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get venue data of any organization remotely

Hello Team, I have found a critical IDOR vulnerability which allows an attacker to get venue data of any organization remotely by just changing the venueid. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get Authentication Details of any Terminal/Gatekeeper

Hello Team, I have found a critical IDOR using which an attacker can get authentication details of any gatekeeper/terminal remotely by just changing the value of gatekeeper/terminal id. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Set anyone's Terminal Data remotely

Hello Team, I have found a critical IDOR using which an attacker can SET anyone's terminal data remotely by just changing a terminal/gatekeeper id in PUT Request. Proof of Concept: Please find it attached. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Get anyone's Terminal Data remotely

Hello Team, I have found a critical IDOR using which an attacker can get anyone's terminal data remotely by just changing the terminal/gatekeeper id. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Delete any terminal/gatekeeper of any organization remotely

Hello Team, I have found a critical IDOR issue due to which an attacker can easily detele any terminal/gatekeeper of any organization by just changing the ID. Proof of Concept: Please find the attached screenshots. Best Regards, Hely H. Shah...

Veris: Critical IDOR - Delete any rule of any organization remotely

Hello Team, I have found a critical IDOR issue which escalates a user privilege and allows and attacker to delete any rule of any organization remotely through his own account by just changing the rule id in DELETE Request. This is again similar to previously reported critical IDORs to delete a...

Veris: Critical IDOR - Delete any venue of any organization remotely

Hello Team, I have found a critical IDOR issue which escalates a user privilege and allows and attacker to delete any venue of any organization remotely through his own account by just changing the venue id in DELETE Request. This is again similar to previously reported critical IDORs to delete a...