vdp@themissinglink.com.au
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS vdp@themissinglink.com.au
03
bewertete Schwachstellen (54)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-15928US | — | — | ||
XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component. | ||||
| CVE-2026-57871US | — | — | ||
Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files.
This issue affects MicroRealEstate: thro… | ||||
| CVE-2026-57870US | — | — | ||
Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization.
This i… | ||||
| CVE-2026-57869US | — | — | ||
Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords… | ||||
| CVE-2026-57868US | — | — | ||
MicroRealEstate is affected by broken object-level access controls in PDF generator functionality.
This issue affects MicroRealEstate: through 1.0.0-alpha3. | ||||
| CVE-2026-57867US | —OT erhöht | — | ||
MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting MicroRealEstate deployments to brute-fo… | ||||
| CVE-2025-5591US | medium5.4OT erhöht | — | ||
Kentico Xperience 13 is vulnerable to a stored cross-site scripting attack via a form component, allowing an attacker to hijack a victim user’s session and perform actions in their… | ||||
| CVE-2024-12223US | — | — | ||
Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component, allowing an attacker to hijack a victim user’s session and… | ||||
| CVE-2025-2394US | —OT erhöht | — | ||
Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data… | ||||
| CVE-2024-28097US | medium5.4 | — | ||
Calendar functionality in Schoolbox application
before version 23.1.3 is vulnerable to stored cross-site scripting
allowing authenticated attacker to perform security actions in… | ||||
| CVE-2024-28096US | medium5.4 | — | ||
Class functionality in Schoolbox application
before version 23.1.3 is vulnerable to stored cross-site scripting
allowing authenticated attacker to perform security actions in the… | ||||
| CVE-2024-28095US | medium5.4 | — | ||
News functionality in Schoolbox application before
version 23.1.3 is vulnerable to stored cross-site scripting allowing
authenticated attacker to perform security actions in the… | ||||
| CVE-2024-28094US | high8.8 | — | ||
Chat functionality in Schoolbox application before
version 23.1.3 is vulnerable to blind SQL Injection enabling the
authenticated attackers to read, modify, and delete database r… | ||||
| CVE-2023-6451US | high7.5 | — | ||
Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authen… | ||||
| CVE-2023-4393US | medium6.1 | — | ||
HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization. | ||||
| CVE-2023-27377US | high7.5OT erhöht | — | ||
Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student d… | ||||
| CVE-2023-27376US | high7.5OT erhöht | — | ||
Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by una… | ||||
| CVE-2023-27375US | high7.5OT erhöht | — | ||
Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by una… | ||||
| CVE-2023-27262US | critical9.1 | — | ||
Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenti… | ||||
| CVE-2023-27261US | medium6.5OT erhöht | — | ||
Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers. | ||||