Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/16 2:40 a.m.•20 views

CVE-2025-6713

CVE-2025-6713 craft aggregation pipeline to access data without proper authorisation due to improper handling of $mergeCursors in MongoDB v8.0 v7.0 v6.0 6.0.22 installation not very difficult - just use pip3 to install the requirements: pip install -r requirements usage python3 CVE-2025-6713...

7.7CVSS7.6AI score0.00417EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/10/13 9:30 a.m.•31 views

Magento Open Source allows Improper Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

7.5CVSS7AI score0.00777EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2023/10/13 6:15 a.m.•46 views

CVE-2023-38220 Full page cache enumeration via cookie X-Magento-Vary

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

7.5CVSS7.6AI score0.00777EPSS
SaveExploits0References1
Mend
Mend
•added 2023/10/13 6:15 a.m.•9 views

CVE-2023-38220

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

8.7CVSS0.00777EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/10/13 6:15 a.m.•45 views

CVE-2023-38220 Full page cache enumeration via cookie X-Magento-Vary

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

7.5CVSS7.1AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/13 12:00 a.m.•5 views

CVE-2023-38220: Improper Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

7.5CVSS7.2AI score0.00777EPSS
SaveExploits0References2
Rows per page
Query Builder