CVE-2025-70141

SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in adminclass.php based on the action parameter. An unauthenticated remote attacke...

PT-2014-3082

Name of the Vulnerable Software and Affected Versions IBM Marketing Platform version 9.1 before FP2 Description The issue allows remote authenticated users to hijack sessions via an unspecified link injection, which can lead to reading records, modifying records, or conducting transactions...