https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:25:44 +0000 https://cve.radiocsirt.org/vuln/cve-2025-40673 <p><strong>Affected:</strong> DinoRANK</p> <p>A Missing Authorization vulnerability has been found in DinoRANK. This vulnerability allows an attacker to access invoices of any user via accessing endpoint &#39;/facturas/YYYY-MM/SDRYYMM-XXXXX.pdf&#39; because there is no access control. The pdf filename can be obtained via OSINT, insecure network traffic or brute force.</p> <p><strong>Affected:</strong> DinoRANK</p> <p>A Missing Authorization vulnerability has been found in DinoRANK. This vulnerability allows an attacker to access invoices of any user via accessing endpoint &#39;/facturas/YYYY-MM/SDRYYMM-XXXXX.pdf&#39; because there is no access control. The pdf filename can be obtained via OSINT, insecure network traffic or brute force.</p> https://cve.radiocsirt.org/vuln/cve-2025-40673