Cyberlord92 vulnerabilities
46 CVEs and advisories name Cyberlord92 as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-11901PowerBI Embed Reports <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-9887Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection
- CVE-2024-9863Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value
- CVE-2024-9862Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change
- CVE-2024-9861Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass
- CVE-2022-4539Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2024-0681Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass
- CVE-2024-2172Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation
- CVE-2022-4943miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
- CVE-2023-4505Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback
- CVE-2023-4506Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback
- CVE-2023-3249Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass
- CVE-2023-3447Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection
- CVE-2023-2982WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
- CVE-2023-2599Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection
- CVE-2023-2484Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection