124 matches found
CVE-2025-1362
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
EUVD-2006-1362
Malware in sbrugna...
CVE-2020-1362
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344, CVE-2020-1369...
CVE-2019-1362
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364...
CVE-2025-1362
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362 easy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRF
The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...
CVE-2025-1362
CVE-2025-1362 affects the WordPress plugin URL Shortener | Conversion Tracking | AB Testing | WooCommerce (≤ 9.0.2). The root cause is missing CSRF checks in certain bulk actions, enabling an attacker with user login who can trick an admin into performing unintended actions (e.g., deleting custom...
CVE-2023-1362
creationtimestamp| type| source ---|---|--- 2025-02-27 19:25:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5758...
CVE-2024-1362
creationtimestamp| type| source ---|---|--- 2024-02-23 12:26:20+00:00| seen| https://t.me/ctinow/191678 2024-02-23 12:26:24+00:00| seen| https://t.me/ctinow/191682 2024-03-13 17:11:56+00:00| seen| https://t.me/ctinow/206916...
CVE-2024-1362
The Colibri Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.253. This is due to missing or incorrect nonce validation on the cpshortcoderefresh function. This makes it possible for unauthenticated attackers to execute arbitra...
CVE-2024-1362
CVE-2024-1362 affects the Colibri Page Builder plugin for WordPress. Public disclosures and vendor data indicate a Cross-Site Request Forgery (CSRF) flaw caused by missing or incorrect nonce validation in the cp_shortcode_refresh() function, enabling unauthenticated attackers to trigger shortcode...
CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
CVE-2023-1362 Improper Restriction of Rendered UI Layers or Frames in unilogies/bumsys
Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2...
CVE-2023-1362
CVE-2023-1362 affects unilogies/bumsys prior to v2.0.2. The root cause is improper restriction of rendered UI layers or frames, enabling clickjacking. Public references in NVD/Red Hat/Nuclei templates describe the issue and indicate upgrade to version 2.0.2 or later as the remediation. CVSS v3.1 ...
CVE-2022-1362 Cambium Networks cnMaestro OS Command Injection
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server...
CVE-2022-1362 Cambium Networks cnMaestro OS Command Injection
The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server...
SUSE: Security Advisory (SUSE-SU-2013:1219-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:1362-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...