CVE-2015-3624

CVE-2015-3624 describes a CSRF vulnerability in Ektron Content Management System (CMS) prior to 9.10 SP1 (Build 9.1.0.184.1.120). The flaw is in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx and can allow an attacker to hijack a content administrator’s authenticated session to perform a dele...

Researcher Finds CSRF Bug in Wind Turbine Software

UPDATE–Wind turbines have been popping up across the United States in great numbers of late, and many of them are connected to the Internet. That, of course, means that these turbines are going to be natural targets for attackers and researchers. A security researcher named Maxim Rupp has...

ManageEngine EventLog Analyzer V:10.0 CSRF Vulnerability

========================================================================================= CSRF Vulnerability in ManageEngine EventLog Analyzer Version :10.0, Build Number : 10001 ========================================================================================= . contents:: Table Of Conten...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

CVE-2015-0541

Cross-site request forgery CSRF vulnerability in EMC RSA Web Threat Detection before 5.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-3950

Cross-site request forgery CSRF vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request...

WP Fast Cache 1.4 CSRF Stored/Reflected XSS Vulnerability

Exploit for php platform in category web applications Exploit Title : WP Fast Cache 1.4 and below CSRF Stored/Reflected XSS Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage :...

WordPress WP Fast Cache 1.4 CSRF / Cross Site Scripting

Exploit Title : WP Fast Cache 1.4 and below CSRF Stored/Reflected XSS Exploit Author : Claudio Viviani Website Author: http://www.homelab.it http://archive-exploit.homelab.it/1 Full HomelabIT Vulns Archive Vendor Homepage : https://wordpress.org/plugins/wp-fast-cache/ Software Link :...

Fedora 22 : phpMyAdmin-4.4.6.1-1.fc22 (2015-8190)

phpMyAdmin 4.4.6.1 2015-05-13 =============================== - security CSRF vulnerability in setup - security Vulnerability allowing man-in-the-middle attack Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 21 : phpMyAdmin-4.4.6.1-1.fc21 (2015-8267)

phpMyAdmin 4.4.6.1 2015-05-13 =============================== - security CSRF vulnerability in setup - security Vulnerability allowing man-in-the-middle attack Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CVE-2015-0736

Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...

CVE-2015-3986

TheCartPress eCommerce Shopping Cart (WordPress plugin) is affected by CVE-2015-3986: CSRF allows remote attackers to hijack administrator sessions via directory traversal through tcp_box_path on the checkout_editor_settings page leading to wp-admin/admin.php. Affected versions: WordPress plugin ...

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery (Add User)

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery Add User Exploit Title: CSRF add arbitrary users Google Dork: Date: 2015-04-28 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org/ Vendor Homepage: http://www.wftpserver.com/serverhistory.htm Software Link:...

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery (Add User)

Exploit Title: CSRF add arbitrary users Google Dork: Date: 2015-04-28 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org/ Vendor Homepage: http://www.wftpserver.com/serverhistory.htm Software Link: http://www.wftpserver.com/ Version: 4.4.5 Tested on: windows 7 Category: webapps...

Cross-Site Request Forgery (CSRF) Vulnerability in ManageEngine Network Configuration

Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...

Manage Engine Asset Explorer 6.1.0 Build: 6110 - CSRF Vulnerability

Exploit for php platform in category web applications =============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of...

SynTail 1.5 Build 566 CSRF / Cross Site Scripting

Exploit Title: Multiple vulnerabilities in SynTail 1.5 Build 566 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SynTailDownload.htm Version: 1.5 Build 566...

SynaMan 3.4 Build 1436 - Multiple Vulnerabilities

Exploit Title: Multiple vulnerabilities in SynaMan 3.4 Build 1436 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/SynaManDownload.htm Version: 3.4 Build 143...

SynaMan 3.4 Build 1436 - Multiple Vulnerabilities

SynaMan 3.4 Build 1436 - Multiple Vulnerabilities Exploit Title: Multiple vulnerabilities in SynaMan 3.4 Build 1436 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link:...