631 matches found
CVE-2024-20105
creationtimestamp| type| source ---|---|--- 2025-01-06 03:29:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113779288474528794 2025-01-06 03:32:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113779302266400341 2025-01-06 04:15:22+00:00| seen|...
CVE-2024-52590
Misskey vulnerability CVE-2024-52590 is caused by missing validation in ApRequestService.signedGet, enabling an attacker to create spoofed profiles that appear to originate from another instance. Affected Misskey versions prior to 2024.11.0-alpha.3 allow impersonation of existing users on the tar...
CVE-2024-52591
CVE-2024-52591 affects Misskey, where missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows forging of user profiles and notes across instances. The attack can impersonate both users and federated peers, with forged objects accepted as valid and full inter...
CVE-2024-52591 Missing validation allows spoofed profiles and notes in Misskey
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet and HttpRequestService.getActivityJson allows an attacker to create fake user profiles and forged notes. The spoofed users will appear to be from a different instance...
CVE-2024-52590: Improper Input Validation
Misskey is an open source, federated social media platform. In affected versions missing validation in ApRequestService.signedGet allows an attacker to create fake user profiles that appear to be from a different instance than the one where they actually exist. These profiles can be used to...
CVE-2024-10900: Missing Authorization
The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmremovefileattachment function in all versions up to, and including, 5.9.3.6. This makes it possible for authenticated attacker...
Moodle Information Disclosure Vulnerability (CNVD-2025-11156)
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from some hidden user profile fields being visible in...
GLPI SQL注入漏洞
GLPI is an open source IT and asset management software from an individual developer. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and i...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
Cybele Software Thinfinity Workspace 安全漏洞
Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...
PT-2024-28833 · Cybele · Thinfinity Workspace
Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: The issue is related to an access control problem in the Create Profile section, allowing attackers to create arbitrary user profiles with elevated privileges. This...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
CVE-2024-40408
Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 contain an access control issue within the Create Profile section. This vulnerability allows an attacker to create arbitrary user profiles with elevated privileges , potentially leading to unauthorized access. To remediate this, us...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49407
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49402
The CVE-2024-49402 entry concerns Samsung Dressroom. Affected software: Dressroom prior to SMR Nov-2024 Release 1. Root cause: improper input validation that enables a physical attacker to access data across multiple user profiles. Impact: cross-profile data exposure on vulnerable devices; CVSS m...