CVE-2025-6713

CVE-2025-6713 MongoDB v8.0 v7.0 v6.0 6.0.22 में $mergeCursors के अनुचित संचालन के कारण बिना उचित प्राधिकरण के डेटा तक पहुँचने के लिए एग्रीगेशन पाइपलाइन तैयार करें। स्थापना बहुत मुश्किल नहीं - बस pip3 का उपयोग करके आवश्यकताओं को स्थापित करें: pip install -r requirements उपयोग root@kitploit: python...

Magento Open Source allows Improper Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

CVE-2023-38220 Full page cache enumeration via cookie X-Magento-Vary

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

CVE-2023-38220 Full page cache enumeration via cookie X-Magento-Vary

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...