51037 matches found
PT-2025-21183 · Sourcecodester · Sourcecodester Best Employee Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It affects the /admin/Operation/User.php page. Recommendations: For SourceCodester Best Employee...
Alibaba Cloud Linux 3 : 0194: mailman:2.1 (ALINUX3-SA-2022:0194)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0194 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-42096: GNU Mailman before 2.1.35...
PT-2025-21154 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a CSRF problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2025-47204
An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...
CVE-2025-46721
nosurf is cross-site request forgery CSRF protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site either via XSS, or otherwise to bypass CSRF checks and issue requests on user's behal...
CVE-2025-46721
A CSRF vulnerability in nosurf (Go) before v1.2.0 arises from misusing Go’s net/http, causing all incoming requests to be treated as plain-text and bypassing the Referer-origin check. An attacker controlling content on the target or a subdomain can forge cross-origin requests and potentially mani...
CVE-2025-46721 nosurf vulnerable to CSRF due to non-functional same-origin request checks
nosurf is cross-site request forgery CSRF protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site either via XSS, or otherwise to bypass CSRF checks and issue requests on user's behal...
CVE-2025-46721 nosurf vulnerable to CSRF due to non-functional same-origin request checks
nosurf is cross-site request forgery CSRF protection middleware for Go. A vulnerability in versions prior to 1.2.0 allows an attacker who controls content on the target site, or on a subdomain of the target site either via XSS, or otherwise to bypass CSRF checks and issue requests on user's behal...
CVE-2025-46610
ARTEC EMA Mail 6.92 allows CSRF...
PT-2025-20701 · Artec · Artec Ema Mail
Name of the Vulnerable Software and Affected Versions: ARTEC EMA Mail version 6.92 Description: The issue allows Cross-Site Request Forgery CSRF. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PT-2025-28191 · Ооо 'Сегнетикс' · Segnetics Smconfig
Уязвимость конфигуратора системных настроек Segnetics SMConfig связана с недостаточной проверкой подлинности выполняемых запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, осуществить CSRF-атаку...
CVE-2025-20195
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a CSRF attack and execute commands on the CLI of an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management...
CVE-2025-47470
Cross-Site Request Forgery CSRF vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content Writer: from n/a through = 1.9.14...
CVE-2025-47667
Cross-Site Request Forgery CSRF vulnerability in qusupport LiveAgent liveagent allows Cross Site Request Forgery.This issue affects LiveAgent: from n/a through = 4.4.7...
CVE-2025-47647
Cross-Site Request Forgery CSRF vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue affects Sidebar Manager Light: from n/a through = 1.18...
CVE-2025-47523
Cross-Site Request Forgery CSRF vulnerability in Lukáš Hartmann Seznam Webmaster seznam-webmaster allows Cross Site Request Forgery.This issue affects Seznam Webmaster: from n/a through = 1.4.7...
CVE-2025-47451
Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through = 1.2...
CVE-2025-47594
Cross-Site Request Forgery CSRF vulnerability in DAEXT Soccer Live Scores allows Cross Site Request Forgery. This issue affects Soccer Live Scores: from n/a through 1.0.5...