CVE-2015-8624

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to...

CVE-2015-8623

The CVE describes a timing-attack CSRF bypass in MediaWiki’s Token check: User::matchEditToken in includes/User.php fails to compare the edit token in constant time for certain old branches, allowing remote attackers to guess tokens. Affected versions include MediaWiki before 1.23.12 and 1.24.x b...

CVE-2015-8624

The CVE-2015-8624 issue affects MediaWiki via User.php: the token comparison is not performed in constant time, enabling timing-based guessing of the edit token and bypass of CSRF protection. Affected versions are MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x be...

CVE-2015-8623

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token comparison in constant time before returning, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different...

X (Formerly Twitter): CSRF on Periscope Web OAuth authorization endpoint

Hi, I would like to report an issue in the OAuth authorization endpoint on Periscope Web. This allows a malicious 3rd party application to gain full API access to a victim's Periscope account. Details Periscope has developer APIs that allow a 3rd party application to access resources on behalf of...

CVE-2017-6379

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

Cross site request forgery (csrf)

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

CVE-2017-6379

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

CVE-2017-6379

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

Some admin paths were not protected with a CSRF token

More info at https://www.drupal.org/SA-2017-001...

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. The vulnerability is due to insufficient CSRF...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...

Lyst: CSRF - Adding unlimited number of saved items via GET request

Hello, I have found a way of potentially adding thousands of items to the saved items list by using a GET request. POC ----------- GET /email-capture/stock-alert/93543518/?returnurl=/email-capture/stock-alert/91703404/?returnurl=/email-capture/stock-alert/89201857/ HTTP/1.1 Host: www.lyst.com By...

Zoneminder 1.291.30 - Cross-Site Scripting SQL Injection Session Fixation Cross-Site Request Forgery

Zoneminder 1.291.30 - Cross-Site Scripting SQL Injection Session Fixation Cross-Site Request Forgery Source: https://www.foxmole.com/advisories/foxmole-2016-07-05.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 === FOXMOLE - Security Advisory 2016-07-05 === Zoneminder multiple vulnerabilities...

Zoneminder 1.29 / 1.30 Multiple Vulnerabilities

Zoneminder versions 1.29 and 1.30 suffer from cross site request forgery, cross site scripting, session fixation, and remote SQL injection vulnerabilities. Zoneminder multiple vulnerabilities Affected Versions ================= Zoneminder 1.29,1.30 Issue Overview ============== Vulnerability Type...

Serendipity <= 2.0.5 Multiple Vulnerabilities

Serendipity is prone to multiple vulnerabilities because of insufficient CSRF protection / sanitized user-supplied input. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Starbucks: csrf blogs.starbucks.com

We can add comments on any article from the the user's account Request POST /blogs/customer/archive/2016/05/06/starbucks-doubleshot-174-energy-coffee-makes-a-flavorful-foray-into-the-realm-of-spiced-coffee.aspx HTTP/1.1 Host: blogs.starbucks.com User-Agent: Mozilla/5.0 Windows NT 6.2; WOW64;...

[SECURITY] [DLA 732-2] monit regression update

Package : monit Version : 1:5.4-2+deb7u2 CVE ID : CVE-2016-7067 Debian Bug : 847196 The update for monit issued as DLA-732-1 causes monit to segfault at actions such as start/stop/restart. This update fixes the regression. For reference the original advisory text follows. Adith Sudhakar discovere...

Xfinity Gateway Remote Code Execution

Exploit Title: Xfinity Gateway: Remote Code Execution Date: 12/2/2016 Exploit Author: Gregory Smiley Contact: [email protected] Vendor Homepage: http://xfinity.com Platform: php The page located at /networkdiagnostictools.php has a feature called test connectivity, which is carried out through ...

Xfinity Gateway - Remote Code Execution

Xfinity Gateway - Remote Code Execution Exploit Title: Xfinity Gateway: Remote Code Execution Date: 12/2/2016 Exploit Author: Gregory Smiley Contact: [email protected] Vendor Homepage: http://xfinity.com Platform: php The page located at /networkdiagnostictools.php has a feature called test...