Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Mail.ru: Access User Tickets via IDOR in [widget.support.my.games]


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vulners.com


image
IDOR vulnerability in widget.support.my.games allowed to disclose the user... ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ Mail.ru: Access User Tickets via IDOR in [widget.support.my.games]


📈 76.04 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8515 | themesflat Themesflat Addons For Elementor Plugin up to 2.2.1 on WordPress TF E Slider Widget/TF Video Widget/TF Team Widget cross site scripting


📈 34.24 Punkte
🕵️ Sicherheitslücken

🕵️ Mail.ru: [auto.mail.ru] IDOR на редактирование поста любого юзера.


📈 31.65 Punkte
🕵️ Sicherheitslücken

🕵️ Reddit: IDOR lets a malicious user reveal the unpinned achievement badges of any Reddit user


📈 29.49 Punkte
🕵️ Sicherheitslücken

🕵️ Dropcontact: IDOR at [https://dropcontact.firstpromote] which allows an UNAUTHORIZED user to ACCESS and EDIT Paypal GMAIL by Changing the ID.


📈 28.55 Punkte
🕵️ Sicherheitslücken

🕵️ Phabricator: IDOR bug to See hidden slowvote of any user even when you dont have access right


📈 28.55 Punkte
🕵️ Sicherheitslücken

🕵️ Mail.ru: Cross-site Scripting (XSS) - DOM on https://account.mail.ru/user/garage?back_url=https://mail.ru


📈 25.84 Punkte
🕵️ Sicherheitslücken

🕵️ Polymail, Inc.: Metadata leakage via IDOR


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ HackerOne: Insecure Direct Object Reference (IDOR) Allows Viewing Private Report Details via /bugs.json Endpoint


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ Tools for Humanity: IDOR - Leaking of team data (name, email, ID, member ID) via POST /api/v1/graphql `FetchMemberships` operation


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ U.S. Dept Of Defense: IDOR leaking PII data via VendorId parameter


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ Topcoder: IDOR at https://fast.trychameleon.com/observe/v2/profiles/ via uid parameter discloses users' PII data


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ U.S. Dept Of Defense: Full Account Take-Over of ████████ Members via IDOR


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ Topcoder: IDOR on deleting drafts on https://apps.topcoder.com/wiki/users/viewmydrafts.action via discardDraftId parameter


📈 25.14 Punkte
🕵️ Sicherheitslücken

🕵️ Mail.ru: IDOR в списке пользователей по домену в relap.io


📈 24.93 Punkte
🕵️ Sicherheitslücken

🕵️ Mail.ru: [api.pandao.ru] IDOR позволяет изменять адрес любого пользователя


📈 24.93 Punkte
🕵️ Sicherheitslücken

📰 Game dev 2K’s support site hacked to push malware via fake tickets


📈 23.99 Punkte
📰 IT Security Nachrichten

🕵️ Palo Alto Software: IDOR on update user preferences


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Nextcloud: IDOR allows me to mark devices of another user for remote wipe out


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Visma Bug Bounty Program: [IDOR]Ability to View/Delete/Edit (Forward to attachment archive) Email of other user if GUID is known.


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Visma Bug Bounty Program: [IDOR]Ability to View/Delete/Edit (Forward to attachment archive) Email of other user if GUID is known.


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Automattic: [IDOR] Attacker user can Approve/Decline AFK on the behalf of other users


📈 23.84 Punkte
🕵️ Sicherheitslücken

📰 IDOR User Account Takeover By Connecting My Facebook Account with victims Account


📈 23.84 Punkte
📰 IT Security Nachrichten

🕵️ Trint Ltd: IDOR to update folder name of other user


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ How an IDOR Vulnerability Led to User Profile Modification


📈 23.84 Punkte
🕵️ Hacking

🕵️ U.S. Dept Of Defense: IDOR leads to view other user Biographical details (Possible PII LEAK)


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Reddit: IDOR allows an attacker to modify the links of any user


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ U.S. General Services Administration: IDOR at training.smartpay.gsa.gov/reports/quizzes-taken-by-user


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ U.S. Dept Of Defense: View another user information with IDOR vulnerability


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ New Relic: IDOR - User is able to download charts/dashboards from cross accounts


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Starbucks: Thailand - IDOR on www.starbuckscardth.in.th: A logged in user could view any Thailand Starbucks card balance if they knew that Starbucks card number


📈 23.84 Punkte
🕵️ Sicherheitslücken

🕵️ Cloudflare Public Bug Bounty: Accessing apps protected via ZT's Access when user account is deleted/disabled even after clearing user session/seat


📈 22.95 Punkte
🕵️ Sicherheitslücken

🕵️ HackerOne: [IDOR] Improper Access Control on Embedded Submission Form


📈 22.91 Punkte
🕵️ Sicherheitslücken

🕵️ Reddit: Getting access of mod logs from any public or restricted subreddit with IDOR vulnerability


📈 22.91 Punkte
🕵️ Sicherheitslücken

🪟 As if one Widget board wasn’t enough, Windows 11 now lets users have 2 Widget boards


📈 22.83 Punkte
🪟 Windows Tipps

matomo
•