Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2026/02/13 1:31 a.m.•33 views

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

4.3CVSS5.5AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/12 4:16 p.m.•20 views

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

4.3CVSS0.00189EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/12 12:00 a.m.•4 views

CVE-2025-69752: Authorization Bypass Through User-Controlled Key

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/12 12:00 a.m.•11 views

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

5.8AI score0.00189EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/12 12:00 a.m.•28 views

CVE-2025-69752

A security vulnerability in Ideagen Q-Pulse 7.1.0.32 affects the "My Details" user profile functionality . This flaw allows an authenticated user to access and view the profile information of other users by manipulating the objectKey HTTP parameter within the My Details page URL. No specific reme...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/12 12:00 a.m.•42 views

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

0.00189EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/12 12:00 a.m.•20 views

Ideagen Q-Pulse 安全漏洞

Ideagen Q-Pulse is a quality compliance management software developed by the British company Ideagen. Version 7.1.0.32 of Ideagen Q-Pulse contains a security vulnerability. This vulnerability stems from a flaw in the My Details page’s functionality, which may allow authenticated users to access...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/12 12:00 a.m.•19 views

CVE-2025-69752

An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...

5.5AI score0.00189EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/12 12:00 a.m.•24 views

PT-2026-7858

Name of the Vulnerable Software and Affected Versions Ideagen Q-Pulse version 7.1.0.32 Description An authenticated user can view other users' profile information in the "My Details" functionality by altering the objectKey HTTP parameter within the URL of the My Details page. This allows...

4.3CVSS5.8AI score0.00189EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2012-6404

Malware in sbrugna...

4.3CVSS6.4AI score0.01631EPSS
SaveExploits2References5
Packet Storm
Packet Storm
•added 2019/08/30 12:00 a.m.•184 views

Sentrifugo 3.2 File Upload Restriction Bypass

Exploit Title: Sentrifugo 3.2 - File Upload Restriction Bypass Google Dork: N/A Date: 8/29/2019 Exploit Author: creosote Vendor Homepage: http://www.sentrifugo.com/ Version: 3.2 Tested on: Ubuntu 18.04 CVE : CVE-2019-15813 Multiple File Upload Restriction Bypass vulnerabilities were found in...

0.5AI score0.33236EPSS
SaveExploits7
NVD
NVD
•added 2013/05/23 3:55 p.m.•28 views

CVE-2012-6557

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

4.3CVSS5.9AI score0.01631EPSS
SaveExploits2References4
Prion
Prion
•added 2013/05/23 3:55 p.m.•27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

4.3CVSS6.2AI score0.01631EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
•added 2013/05/23 12:00 a.m.•5 views

PT-2013-2011

Name of the Vulnerable Software and Affected Versions AboutMe plugin version 1.1.1 for Vanilla Forums Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters to the Edit My Details page, including AboutMe/RealName, AboutMe/Name, AboutMe/Quote,...

4.3CVSS0.01631EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/05/23 12:00 a.m.•9 views

CVE-2012-6557: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

4.3CVSS5.9AI score0.01631EPSS
SaveExploits2References2
Rows per page
Query Builder