OneNav Bookmark Management Interface Data Compromise

The vulnerability of the /index.php?c=api interface of the OneNav bookmark management program is related to deficiencies in the authentication process due to incorrect generation of tokens with the X-Token parameter. Exploiting this vulnerability allows a malicious actor to compromise the...

CVE-2023-7210

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2023-7210

CVE-2023-7210 affects OneNav up to 0.9.33. The vulnerability is an authentication flaw: manipulation of the X-Token parameter in the API endpoint /index.php?c=api leads to improper authentication. It is exploitable remotely and the exploit has been disclosed publicly (VDB-249765). Several connect...

CVE-2023-7210: Improper Authentication

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

OneNav License Issues Vulnerabilities

OneNav is a minimalist navigation/bookmark management system developed using PHP. An authorization issue vulnerability exists in OneNav version 0.9.33 and earlier versions, which stems from the incorrect operation of the parameter X-Token that can lead to incorrect authentication...

PT-2024-3862

Name of the Vulnerable Software and Affected Versions OneNav versions up to 0.9.33 Description A critical issue affects the API component of OneNav, specifically the /index.php?c=api file. The manipulation of the X-Token argument leads to improper authentication, allowing remote attacks. This iss...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

PT-2020-20071

Name of the Vulnerable Software and Affected Versions UniFi Protect versions 1.14.10 and earlier UDM-Pro firmware versions 1.7.2 and earlier UNVR firmware versions 1.3.12 and earlier Description A security issue was found in the UniFi Protect controller API, where the authentication was using...

CVE-2020-8267: Improper Authentication

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...