CVE-2024-55186

An IDOR Insecure Direct Object Reference vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging...

CVE-2024-10385

creationtimestamp| type| source ---|---|--- 2024-12-20 15:54:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113685957516698614 2024-12-20 16:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqrull2eo22 2024-12-20 18:25:30+00:00| seen|...

CVE-2024-56351

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576606594868 2024-12-20 15:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoj7qldz2x 2024-12-20 16:45:00+00:00| seen|...

CVE-2024-56348

creationtimestamp| type| source ---|---|--- 2024-12-20 14:17:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113685576561934015 2024-12-20 15:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqoiyzizh2s 2024-12-20 16:45:01+00:00| seen|...

CVE-2024-12571

creationtimestamp| type| source ---|---|--- 2024-12-20 07:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpmvawe23 2024-12-20 07:50:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113684057166107368 2024-12-20 09:13:10+00:00| seen|...

CVE-2024-11806

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp56mnj22 2024-12-20 07:20:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939101269205 2024-12-20 09:13:15+00:00| seen|...

CVE-2024-11784

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptp2us4i2a 2024-12-20 07:20:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683939085318685 2024-12-20 09:13:12+00:00| seen|...

CVE-2024-11331

creationtimestamp| type| source ---|---|--- 2024-12-20 07:05:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683880024480688 2024-12-20 07:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptomtz2z2a 2024-12-20 09:13:24+00:00| seen|...

CVE-2024-44292

creationtimestamp| type| source ---|---|--- 2024-12-20 04:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpjmvsqqd2g 2024-12-20 04:25:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113683251724054879 2024-12-20 05:52:29+00:00| seen|...

CVE-2022-32204

creationtimestamp| type| source ---|---|--- 2024-12-20 03:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpgcbm76y22 2024-12-20 05:02:11+00:00| seen| https://t.me/cvedetector/13396...

CVE-2024-12678

creationtimestamp| type| source ---|---|--- 2024-12-20 01:55:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113682658072893365 2024-12-20 02:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwibgf52z 2024-12-20 04:12:03+00:00| seen|...

CVE-2020-9250

creationtimestamp| type| source ---|---|--- 2024-12-20 01:54:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113682658024150422 2024-12-20 02:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwdyh2h2r 2024-12-20 04:12:02+00:00| seen|...

CVE-2022-32144

creationtimestamp| type| source ---|---|--- 2024-12-20 01:54:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113682658039075628 2024-12-20 02:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwg6aad27 2024-12-20 04:12:02+00:00| seen|...

PT-2024-36490 · Unknown · Oqtane Framework

Name of the Vulnerable Software and Affected Versions: oqtane Framework version 6.0.0 Description: An IDOR Insecure Direct Object Reference issue exists, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the...

Oqtane Framework 安全漏洞

Oqtane Framework is an open source content management system CMS and application framework from Oqtane Open Source. A security vulnerability exists in Oqtane Framework version 6.0.0, which stems from an insecure direct object reference that allows a logged-in user to access other user's messages ...

‘Fix It’ social-engineering scheme impersonates several brands

More and more, threat actors are leveraging the browser to deliver malware in ways that can evade detection from antivirus programs. Social engineering is a core part of these schemes and the tricks we see are sometimes very clever. Case in point, there has been an increase in attacks that involv...

CVE-2024-56327

creationtimestamp| type| source ---|---|--- 2024-12-19 22:29:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113681851388329044 2024-12-19 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoyum6vh72m 2024-12-20 00:51:24+00:00| seen|...

CVE-2024-52794

creationtimestamp| type| source ---|---|--- 2024-12-19 19:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113681106537514551 2024-12-19 19:23:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113681119432889668 2024-12-19 20:15:31+00:00| seen|...

CVE-2024-55196

creationtimestamp| type| source ---|---|--- 2024-12-19 19:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldolhmhffw2t 2024-12-19 20:40:34+00:00| seen| https://t.me/cvedetector/13363 2025-09-15 13:28:31+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f...

CVE-2024-54150

creationtimestamp| type| source ---|---|--- 2024-12-19 19:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldolhjv6ye27 2024-12-19 20:40:33+00:00| seen| https://t.me/cvedetector/13362 2024-12-21 08:24:32+00:00| seen|...