10493 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in pcsd web UI in pcs before 0.9.149...
CVE-2016-0720
Cross-site request forgery CSRF vulnerability in pcsd web UI in pcs before 0.9.149...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in ManageEngine Password Manager Pro before 8.5 Build 8500...
CVE-2016-5401
CVE-2016-5401 is a CSRF vulnerability in Red Hat JBoss BRMS and BPMS 6. The flaw allows remote attackers to hijack user authentication to perform state-changing requests on the affected application via a crafted web page. Connected sources confirm the affected products are JBoss BRMS/BPMS 6, but ...
CVE-2016-1161
CVE-2016-1161 affects ManageEngine Password Manager Pro prior to 8.5 (Build 8500). The vulnerability is a CSRF flaw that could allow an attacker to perform unintended actions when a logged-in user visits a malicious URL. Public sources in the connected documents corroborate a CSRF vulnerability f...
CSRF Vulnerability in Ocean CMS V6.48 Add Administrator Backend
Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS V6.48 CSRF vulnerability exists in the background add administrator. Allows attackers to exploit the vulnerability to forge form links and induce administrators to click to add background accounts...
Atlassian JIRA Multiple Vulnerabilities
Atlassian JIRA is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atlassian:jira"; if...
Cross site request forgery (csrf)
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations...
Facebook and Dropbox in the CSRF vulnerability analysis-vulnerability warning-the black bar safety net
Facebook provides the user with a very handy feature, and the user can pass this option directly from the Dropbox account to load file: ! This feature will allow the user directly in the browser window to view and upload to the Dropbox account in the file: ! This functional integration is through...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors...
CVE-2016-4891
CVE-2016-4891 is a CSRF vulnerability in SetucoCMS affecting all versions, enabling remote attackers to hijack an administrator’s session to change settings via unspecified vectors. The linked JVN entries confirm the issue and note the impact as unintended setting changes; multiple sources also r...
CSRF in Facebook/Dropbox - "Mallory added a file using Dropbox"
tl;dr Facebook Groups offers the option to upload files directly from the Dropbox account. This integration is done using the OAuth 2.0 protocol and suffered from a variant of the classic OAuth CSRF defined by Egor Homakov as the the Most Common OAuth2 Vulnerability, see video below: Introduction...
CVE-2015-8255
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/localdel.cgi...
WordPress CopySafe Web Cross Site Request Forgery
Details ======= Software:CopySafe Web version: a a a a a ========= Mitigations ================ Disable the plugin until a new version is released that fixes this bug. Fixed ========= https://wordpress.org/plugins/wp-copysafe-web/ changelog -2.6 realease Best regards, Zhiyang Zeng of Tencent...
D-Link DIR-615 - Cross-Site Request Forgery
Title: ==== D-Link DIR 615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Pratik S. Shah Reference: ========= CVE Details: CVE-2017-7398. Date: ==== 1-04-2017 Vendor: ====== D-Link wireless router Product: ======= DIR-615...
Foswiki 1.0.x < 1.0.5 CSRF Vulnerability
Foswiki is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
AXIS (Multiple Products) - Cross-Site Request Forgery
0RWELLL4BS security advisory olsa-CVE-2015-8255 PGP: 79A6CCC0 @orwelllabs Advisory Information ==================== - Title: Cross-Site Request Forgery - Vendor: AXIS Communications - Research and Advisory: Orwelllabs - Class: Session Management control CWE-352 - CVE Name: CVE-2015-8255 - Affecte...
Fedora 24 : deluge (2017-ce66f11df1)
Core 2889: Fixed 'Too many files open' errors. 2861: Added support for python-geoip for use with libtorrent 1.1. 2149: Fixed a single proxy entry being overwritten resulting in no proxy set. UI Added trackerstatus translation to UIs. GtkUI 2901: Strip whitespace from infohash before checks. Add...
CVE-2017-6366
Cross-site request forgery CSRF vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the hostname parameter to dnslookup.cgi. NOTE: this issue can be combined with...
