https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 17:32:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-165366 EUVD-2026-165366 https://cve.radiocsirt.org/vuln/euvd-2026-165366 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34769 <p>Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there are some functionalities that the specific user is not allowed to perform. However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then the attacker can access sensitive data that he not supposed to access because its belong to another user.</p> <p>Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there are some functionalities that the specific user is not allowed to perform. However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then the attacker can access sensitive data that he not supposed to access because its belong to another user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34769 https://cve.radiocsirt.org/vuln/ghsa-c68j-5prp-rc5r <p>Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there are some functionalities that the specific user is not allowed to perform. However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then the attacker can access sensitive data that he not supposed to access because its belong to another user.</p> <p>Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there are some functionalities that the specific user is not allowed to perform. However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then the attacker can access sensitive data that he not supposed to access because its belong to another user.</p> https://cve.radiocsirt.org/vuln/ghsa-c68j-5prp-rc5r https://cve.radiocsirt.org/vuln/gsd-2022-34769 gsd-2022-34769 https://cve.radiocsirt.org/vuln/gsd-2022-34769