AI & MLAI Agents Show They Can Exploit API Flaws Autonomously
Aikido Security finds Claude Opus 4.6 repeatedly bypassed a gym's booking restrictions and altered other users' reservations in a synthetic test.
> Search
4 results for “idor”
AI & ML
Cyber CrimeVatican-Endorsed App Leaks User Profiles
A critical IDOR vulnerability in the Pope's official prayer app has left the personal data of over 700,000 users exposed for months.
SecuritySolarWinds Serv-U Faces Critical RCE
A critical remote code execution vulnerability identified in SolarWinds Serv-U requires domain administrator access to exploit.
SecuritySolarWinds Serv-U Critical RCE Flaw
A critical IDOR vulnerability in SolarWinds Serv-U allows authenticated attackers to execute code as root, earning a CVSS score of 9.1.