5025 matches found
Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference
Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...
Danswer - Insecure Direct Object Reference
The application does not verify whether the attacker is the creator of the file, allowing the attacker to directly call the GET /api/chat/file/fileid interface to view any user's file. id: CVE-2024-9617 info: name: Danswer - Insecure Direct Object Reference author: s4e-io severity: medium...
CVE-2017-11317-auto-exploit-
Vulnerabilidades CVE-2017-11317 . https://www.telerik.com/support/kb/aspnet-ajax/upload-%28async%29/details/insecure-direct-object-reference...
CVE-2022-30190
CVE-2022-30190 Reproducción de Microsoft Office Word Rce CVE-2022-30190 Resumen de la vulnerabilidad Los archivos .docx de MS Office pueden contener referencias externas a objetos OLE como archivos HTML. Existe un escenario HTML que usa ms-msdt: para invocar la herramienta de diagnóstico msdt, la...
Tiredful-API
¿Qué es Tiredful API? Tiredful API es una aplicación intencionalmente diseñada con fallos. El objetivo de esta aplicación web es enseñar a desarrolladores, QA o profesionales de seguridad sobre las vulnerabilidades presentes en los servicios web REST API debido a prácticas de codificación...
EUVD-2026-77109
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...
CVE-2026-89447
A flaw was found in the Linux kernel's iommufd subsystem. A local attacker could exploit a vulnerability where an object reference is leaked during the unmapping of internal accesses. This occurs because the iommufdaccessnotifyunmap function incorrectly locks an object before checking if the acce...
CVE-2026-89447
CVE-2026-89447 affects the Linux kernel iommufd subsystem. In iommufd_access_notify_unmap() , the code calls iommufd_lock_obj() before checking whether the access is internal. When the access is internal, the loop skips it via continue, bypassing the matching iommufd_put_object() call used by the...
CVE-2026-89447 iommufd: Avoid locking internal accesses during unmap
In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...
CVE-2026-89447 iommufd: Avoid locking internal accesses during unmap
In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufdaccessnotifyunmap skips internal accesses because they do not have an external unmap callback to invoke. However, the current test calls iommufdlockobj before checking...
jsherp-user-info-idor
jshERP /user/info IDOR — Paquete de envío para VulDB Este repositorio contiene un aviso independiente estilo VulDB para una referencia directa a objetos insegura autenticada en jshERP. Producto: jshERP Commit probado: ad6cf886dd4e0676723060a25d361c703dc56bc0 3.6-SNAPSHOT, HEAD de master en GitHub...
CVE-2026-62134
Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...
CVE-2026-62113
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
CVE-2026-62134
An Insecure Direct Object References (IDOR) vulnerability was identified in the WordPress Starter Templates plugin (versions ≤ 4.7.5 ). The flaw allows a contributor-level authenticated user to manipulate objects they should not have access to, resulting in a low integrity impact (CVSS 4.3, MEDIU...
CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...
CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
EUVD-2026-76207
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
EUVD-2026-76216
Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...
CVE-2026-62140 WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...