CVE-2025-13003

Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers. This issue affects AxOnboard: from 3.2.0 before 3.3.0...

CVE-2025-13003 IDOR in Aksis Computer's AxOnboard

Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers. This issue affects AxOnboard: from 3.2.0 before 3.3.0...

CVE-2025-13472

A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces and bzm project Ids. Prior to this fix, anyone could see this list as a dropdown on the Jenkins UI...

[SECURITY] [DLA 4401-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4401-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 11, 2025 https://wiki.debian.org/LTS -...

CVE-2025-13955

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers...

PT-2025-50603

Name of the Vulnerable Software and Affected Versions Aksis Computer Services and Consulting Inc. AxOnboard versions 3.2.0 through 3.2.9 Description A flaw exists in Aksis Computer Services and Consulting Inc. AxOnboard that permits an authorization bypass through the manipulation of...

PT-2025-50610

Name of the Vulnerable Software and Affected Versions ApplyLogic versions through 01.12.2025 Description An authorization bypass exists due to user-controlled keys in ApplyLogic. This allows exploitation of trusted identifiers. Recommendations Versions prior to 01.12.2025 are affected. At the...

EulerOS 2.0 SP13 : avahi (EulerOS-SA-2025-2514)

According to the versions of the avahi package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS...

LIVE555 Streaming Media 2018.09.02 Multiple DoS Vulnerabilities - Linux

LIVE555 Streaming Media is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Aksis AxOnboard 安全漏洞

Aksis AxOnboard is a human resource management software from the Turkish company Aksis. A security vulnerability exists in Aksis AxOnboard version 3.2.0 up to and including version 3.3.0, which originates from a user-controllable key leading to an authorization bypass that could exploit trusted...

Netiket ApplyLogic 安全漏洞

Netiket ApplyLogic is a platform for automating processes from Netiket Turkey. A security vulnerability exists in Netiket ApplyLogic versions 01.12.2025 and earlier, which stems from a user-controllable key leading to an authorization bypass that could exploit trusted identifiers...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-2483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-2462)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-53776

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

CVE-2023-53776 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

CVE-2023-53776

CVE-2023-53776 affects Screen SFT DAB 1.9.3, describing an authentication bypass caused by weak session management and reuse of IP-bound session identifiers. This enables attackers to issue unauthorized requests to the device management API and perform critical operations on the transmitter. The ...

CVE-2023-53776 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform...

EUVD-2025-202420

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125 IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...