46 matches found
CVE-2026-57155
https://github.com/opnsense/core/security/advisories/GHSA-wjqq-rfmm-v5h3...
CVE-2026-10211 AstrBotDevs AstrBot fs.py _normalize_rw_path authorization
A vulnerability was determined in AstrBotDevs AstrBot 4.23.6. Affected by this issue is the function normalizerwpath of the file astrbot/core/tools/computertools/fs.py. This manipulation causes incorrect authorization. It is possible to initiate the attack remotely. The exploit has been publicly...
CMS content management system CSRF
The vulnerability of the /core/tools/addtranslation.php component of the content management system CMS is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...
PT-2024-21366
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/update place.php. This allows for unauthorized actions to be performed on behalf of a user without their knowledge or...
CVE-2024-26349
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletetranslation.php...
PT-2024-21367
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/add places.php. This allows for unauthorized requests to be made on behalf of the user. Recommendations For flusity-CMS...
flusity CMS Security Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/deletetranslation.php...
CVE-2024-26445: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
PT-2024-21378
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/delete place.php. This allows for unauthorized actions to be performed on behalf of a user. Recommendations For...
CVE-2024-26349
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletetranslation.php...
CVE-2024-26445
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deleteplace.php...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/updateplace.php...
CVE-2024-26350: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updatecontactformsettings.php...
CVE-2024-26349: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/deletetranslation.php...
CVE-2024-26351: Cross-Site Request Forgery (CSRF)
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
flusity CMS Security Vulnerability
flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity-CMS version v2.33, which was discovered to contain a cross-site request forgery CSRF vulnerability via the component /core/tools/addplaces.php...
CVE-2024-26351
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/updateplace.php...
CVE-2024-26352
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addplaces.php...
PT-2024-21365
Name of the Vulnerable Software and Affected Versions flusity-CMS version 2.33 Description The issue is related to a Cross-Site Request Forgery CSRF in the component /core/tools/update contact form settings.php. This allows for unauthorized actions to be performed on behalf of a user...