CVE-2025-13124

Technical details for CVE-2025-13124 are not publicly available in the provided documents. Monitor for updates from vendors (Red Hat, NVD, etc.) for affected products, impact, and remediation.

CVE-2025-13124 IDOR in Netiket''s ApplyLogic

Authorization Bypass Through User-Controlled Key vulnerability in Netiket Information Technologies Ltd. Co. ApplyLogic allows Exploitation of Trusted Identifiers. This issue affects ApplyLogic: through 01.12.2025...

CVE-2025-13003

Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers. This issue affects AxOnboard: from 3.2.0 before 3.3.0...

Scammers Sent 40,000 E-Signature Phishing Emails to 6,000 Firms in Just 2 Weeks

Phishing campaign: Scammers sent over 40,000 spoofed SharePoint, DocuSign and e-sign emails to companies, hiding malicious links behind trusted redirect services...

CVE-2025-13003 IDOR in Aksis Computer's AxOnboard

Authorization Bypass Through User-Controlled Key vulnerability in Aksis Computer Services and Consulting Inc. AxOnboard allows Exploitation of Trusted Identifiers. This issue affects AxOnboard: from 3.2.0 before 3.3.0...

PT-2025-50603

Name of the Vulnerable Software and Affected Versions Aksis Computer Services and Consulting Inc. AxOnboard versions 3.2.0 through 3.2.9 Description A flaw exists in Aksis Computer Services and Consulting Inc. AxOnboard that permits an authorization bypass through the manipulation of...

PT-2025-50610

Name of the Vulnerable Software and Affected Versions ApplyLogic versions through 01.12.2025 Description An authorization bypass exists due to user-controlled keys in ApplyLogic. This allows exploitation of trusted identifiers. Recommendations Versions prior to 01.12.2025 are affected. At the...

PT-2025-50715

Name of the Vulnerable Software and Affected Versions Apache affected versions not specified Description A memory corruption issue exists due to uninitialized data within the trusty ffa mem reclaim function in shared-mem-smcall.c. This could allow for local escalation of privilege without requiri...

PT-2025-50611

Name of the Vulnerable Software and Affected Versions ScreenConnect versions prior to 25.8 Description The ScreenConnect server component, in versions prior to 25.8, has insufficient server-side validation and integrity checks within its extension subsystem. This allows the installation and...

Aksis AxOnboard 安全漏洞

Aksis AxOnboard is a human resource management software from the Turkish company Aksis. A security vulnerability exists in Aksis AxOnboard version 3.2.0 up to and including version 3.3.0, which originates from a user-controllable key leading to an authorization bypass that could exploit trusted...

Netiket ApplyLogic 安全漏洞

Netiket ApplyLogic is a platform for automating processes from Netiket Turkey. A security vulnerability exists in Netiket ApplyLogic versions 01.12.2025 and earlier, which stems from a user-controllable key leading to an authorization bypass that could exploit trusted identifiers...

EUVD-2025-202420

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers.This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125 IDOR in Im Park's DijiDemi

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

CVE-2025-13125

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Publishing and Advertising, Education Ltd. Co. DijiDemi allows Exploitation of Trusted Identifiers. This issue affects DijiDemi: through 28.11.2025...

CVE-2025-66508

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...

Im Park DijiDemi 安全漏洞

Im Park DijiDemi is an educational software from Im Park Turkey. A security vulnerability exists in Im Park DijiDemi version 28.11.2025 and earlier, which stems from a user control key leading to an authorization bypass that could exploit trusted identifiers...

EUVD-2025-202313

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on re-keying and stream flushing during device rebinding may allow stale write transactions from a previous security context to be processed in a new one. This can lead to...

CVE-2025-9614

CVE-2025-9614 is part of PCIe IDE vulnerabilities described in multiple sources (PCI-SIG/PCIe IDE spec). The issue: insufficient guidance on re-keying/stream flushing during device rebinding can allow stale writes from one security context to be processed in a new one, compromising confidentialit...

CVE-2025-66508 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...