PT-2026-115605

Name of the Vulnerable Software and Affected Versions aThemeArt Theme Helper versions prior to 1.0.9 Description aThemeArt Theme Helper is subject to a Cross-Site Request Forgery CSRF flaw. This issue allows an attacker to induce a user to perform actions they did not intend to do by tricking the...

vertx-web-xsrf

Overview The CSRFHandlerImpl io.vertx.ext.web.handler.impl.CSRFHandlerImpl in Vert.x Web does not create CSRF Tokens that are unique per user session. A malicious website can still perform CSRF by obtaining a valid CSRF token and adding it to a HTML form and then submitting the form to the...

CVE-2021-46398

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this repository, you will find a proof of concept of the exploitation of the CVE-2021-46398 flaw through a docker compose, as well as an analysis of the impacts of this flaw on information systems. Exploit Title: FileBrowser 2.17.2 - Cross Site...

CVE-2025-12028

1 Start a simple HTTP server to host the proof-of-concept page mkdir -p /tmp/attacker && cd /tmp/attacker php -S 127.0.0.1:8000 2 Create a file /tmp/attacker/poc.html with the following contents document.getElementById'x'.submit; 3 Trigger the PoC in a logged-in browser session While logged into:...

CVE-2026-106708

XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery CSRF vulnerability in the user management controller JobUserController. The endpoints /user/insert, /user/update, and /user/delete lack CSRF protection and do not restrict HTTP method...

GHSA-44XR-MRHH-QM78 Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)

Summary In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login. The callback handler accepts whatever state the client sends without comparing it to anything stored in the user agent, enabling a...

Nginx UI: Casdoor SSO callback uses a constant `state` parameter (login CSRF)

Summary In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login. The callback handler accepts whatever state the client sends without comparing it to anything stored in the user agent, enabling a...

GHSA-526J-582W-7FM9 Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)

Impact Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback URL with the attacker’s authorization code. Because the LINE backend did...

Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)

Impact Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback URL with the attacker’s authorization code. Because the LINE backend did...

CVE-2026-48060

CVE-2026-48060 - Litestar HTML Injection Through CSRF Token This repo contains the proof of concept exploit and vulnerable application to demonstrate the HTML injection vulnerability present in version 2.21.0 of Litestar. How to Run git clone https://github.com/Blinky-Keys/CVE-2026-48060 cd...

CVE-2026-62322 Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)

Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. An attacker can begin authorization for an attacker-controlled LINE account and induce a victim to visit the resultin...

CVE-2026-62322

The Python Social Auth library is vulnerable to a Login CSRF attack in the LINE backend (LineOAuth2) prior to version 5.0.2 . The root cause is a failure to validate the returned OAuth state during the authorization code exchange. An attacker can initiate authorization for a controlled LINE accou...

CVE-2026-36956

CVE-2026-36956: Cross-Site Request Forgery CSRF in Web Management Interface CVE ID: CVE-2026-36956 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Descripti...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploit CSRF on SCOPIA XT Desktop version 8.3.915.4 This PoC will be describe how to explore Cross-Site Request CSRF Forgery on SCOPIA XT Desktop version 8.3.915.4 About SCOPIA website: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 About Cross-Site Request Forgery CSRF Cross-site...

mitigation-cve-2019-9787

mitigation-cve-2019-9787 POC 1. simply xss : 2. simple csrf: attacker's website code--- https://github.com/kuangting4231/wordpress.github.io 3. csrf remote code execution: attacker's website code--- https://github.com/kuangting4231/assigment1.github.io mitigation 1. fix the logic flaw in the...

USN-8933-1 rabbitmq-server vulnerabilities

It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request forgery attack. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04...

CVE-2026-30498

CVE-2026-30498 – CSRF Vulnerability AdminPanel 4.0 Overview CVE ID: CVE-2026-30498 Reserved by MITRE Discoverer: Mehdi Ben Hamou A Cross-Site Request Forgery CSRF vulnerability exists in the delete.php endpoint of AdminPanel 4.0. This vulnerability allows an attacker to trigger sensitive actions...

cve-2024-51567-poc

cve-2024-51567-poc Simplified Description Vulnerability Overview ID : CVE-2024-51567 Type : Command Injection / CSRF Bypass Affected Versions : CyberPanel 2.3.6 and 2.3.7 unpatched Description : In the upgrademysqlstatus endpoint of CyberPanel, by bypassing the secMiddleware protection for POST...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Unauthenticated CSRF Account TakeOver in BigTreeCMS v4.4.14 All searchable modules in the admin panel of BigTreeCMS v4.4.14 are vulnerable to reflected DOM-XSS via the URI. Search queries are reflected on the page without proper sanitization...