odude records

5 published records for vendor odude.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
52Plan	CVE-2022-4060Proof of concept	User Post Gallery <= 2.19 - Unauthenticated RCEodude · user post gallery · CWE-94 pre-auth RCE	Critical9.8	—	42.7%	Jan 16, 2023
41Plan	CVE-2024-9989Proof of concept	Crypto <= 2.18 - Authentication Bypass via log_inodude · crypto tool · CWE-288 Pre-auth Auth bypass	Critical9.8	—	7.1%	Oct 29, 2024
39Monitor	CVE-2024-9988No exploit	Crypto <= 2.19 - Authentication Bypass via registerodude · crypto tool · CWE-288 Pre-auth Auth bypass	Critical9.8	—	1.1%	Oct 29, 2024
35Monitor	CVE-2024-9990No exploit	Crypto <= 2.15 - Cross-Site Request Forgery to Authentication Bypassodude · crypto tool · CWE-352 Pre-auth Auth bypass CSRF	High8.8	—	0.3%	Oct 29, 2024
24Monitor	CVE-2022-0449No exploit	Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scriptingodude · flexi · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Mar 14, 2022

CVE-2022-4060
52Plan
User Post Gallery <= 2.19 - Unauthenticated RCE
CriticalCVSS 9.8Proof of conceptEPSS 43%
- pre-auth RCE
odude · user post galleryJan 16, 2023
CVE-2024-9989
41Plan
Crypto <= 2.18 - Authentication Bypass via log_in
CriticalCVSS 9.8Proof of conceptEPSS 7%
- Pre-auth
- Auth bypass
odude · crypto toolOct 29, 2024
CVE-2024-9988
39Monitor
Crypto <= 2.19 - Authentication Bypass via register
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
odude · crypto toolOct 29, 2024
CVE-2024-9990
35Monitor
Crypto <= 2.15 - Cross-Site Request Forgery to Authentication Bypass
HighCVSS 8.8No exploitEPSS 0%
odude · crypto toolOct 29, 2024
CVE-2022-0449
24Monitor
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
odude · flexiMar 14, 2022