Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the Reporting API. An attacker can gain unauthorized access to sensitive report data by exploiting the flawed HTTP Basic Authentication implementation. Note: This is only exploitable if the API is enabled and...

Mautic allows Improper Authorization in Reporting API

Summary This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any...

Our New Carbon Calculator Report Supports 400 Days of Data

The new Carbon Calculator is supported by the latest reporting API framework, improves performance, and allows customers to monitor up to 400 days of data...

PT-2020-20131

Name of the Vulnerable Software and Affected Versions Unitrends Backup versions prior to 10.4.1 Kaseya Traverse versions prior to 9.5.20 Description The issue involves improper sanitization of an HTTP request parameter, allowing for SQL injection and authentication bypass. Additionally, there is ...