CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

Delinea PAM Secret Server Access Control Error Vulnerability

Delinea PAM Secret Server is a key service manager from Delinea. An Access Control Error vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to view system reports and modify customized reports via the Reports feature in the Web UI when Unrestrict...

CVE-2023-7248

creationtimestamp| type| source ---|---|--- 2024-03-15 21:22:01+00:00| seen| https://t.me/ctinow/209151 2024-03-15 21:26:14+00:00| seen| https://t.me/ctinow/209164...

CVE-2024-2531

creationtimestamp| type| source ---|---|--- 2024-03-15 21:01:31+00:00| seen| https://t.me/ctinow/209132 2024-03-16 23:21:40+00:00| seen| https://t.me/ctinow/209727 2024-03-16 23:26:57+00:00| seen| https://t.me/ctinow/209729...

CVE-2024-25653

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI...

CVE-2024-25653

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI...

CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE with access to the Report functionality to gain unauthorized access to remote sessions created by legitimate users through...

Improper access control

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI...

CVE-2024-25653

Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allows unprivileged users, when Unlimited Admin Mode is enabled, to view system reports and modify custom reports via the Report functionality in the Web UI...

Fortinet FortiPortal Authorization Issues Vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. An authorization issue vulnerability exists in Fortinet FortiPortal that stems from the...

PT-2024-21069 · Delinea · Delinea Pam Secret Server

Name of the Vulnerable Software and Affected Versions: Delinea PAM Secret Server version 11.4 Description: The issue allows unprivileged users to view system reports and modify custom reports via the Report functionality in the Web UI when Unlimited Admin Mode is enabled. Recommendations: For...

Delinea PAM Secret Server 安全漏洞

Delinea PAM Secret Server is a key service manager from Delinea. An Access Control Error vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to view system reports and modify customized reports via the Reports feature in the Web UI when Unrestrict...

CVE-2023-48788

creationtimestamp| type| source ---|---|--- 2024-03-12 16:26:39+00:00| seen| https://t.me/ctinow/205806 2024-03-12 16:32:08+00:00| seen| https://t.me/ctinow/205822 2024-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1246 2024-03-13 15:30:05+00:00| seen|...

CVE-2024-21761

An improper authorization vulnerability CWE-285 in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload...

CVE-2024-21761

An improper authorization vulnerability CWE-285 in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload...

CVE-2023-49785

creationtimestamp| type| source ---|---|--- 2024-03-12 01:26:57+00:00| seen| https://t.me/ctinow/205222 2024-03-12 01:26:58+00:00| seen| https://t.me/ctinow/205223 2024-03-13 08:39:26+00:00| seen| https://t.me/arpsyndicate/4186 2024-03-13 14:00:55+00:00| seen| https://t.me/truesecator/5515...

PT-2024-19041 · Fortinet · Fortiportal

Name of the Vulnerable Software and Affected Versions: FortiPortal versions 7.0.6 and below FortiPortal version 7.2.0 Description: An improper authorization issue in FortiPortal may allow a user to download other organizations' reports via modification in the request payload. This issue could...

[SECURITY] Fedora 40 Update: fernflower-211.7442.40-11.fc40

JIdea's decompiler is the first actually working analytical decompiler for Ja va and probably for a high-level programming language in general. Naturally it is still under development, please send your bug reports and improvement suggestions to the issue tracker...

BIT-GITLAB-2023-1167

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR...

BIT-ODOO-2021-23203

Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests...