CVE-2019-16114

In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain access to the application. Next, he can change the directory that the application uploads files to, which allows him to achieve remote code execution...

Authentication flaw

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. The contains function in wplikebutton.php did not check if the current request is made by an authorized user, thus allowing any...

Computer connection status is "Rejected" in Veeam Service Provider Console

Challenge You may see the following status for the computer in Veeam Service Provider Console - "Discovery" - "Discovered Computers": Solution Under "Discovered Computers" press "Change settings…" and turn on "Accept new connections" If this KB article did not resolve your issue or you need furth...

CVE-2017-1000224

CSRF in YouTube WordPress plugin could allow unauthenticated attacker to change any setting within the plugin...

Cisco DPC3939B Comcast Firmware Cross-Site Request Forgery Vulnerability

The Cisco DPC3939B is a wireless voice gateway product from Cisco USA. comcast is a set of firmware developed by Comcast USA that runs in devices such as gateways and modems. A cross-site request forgery vulnerability exists in the Comcast firmware in the Cisco DPC3939B using firmware version...

CVE-2017-4052

Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense ATD 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to change or update any configuration settings, or gain administrator functionality via a crafted HTTP request parameter...

Cross site request forgery (csrf)

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...

Detcon SiteWatch Gateway Authentication Vulnerability (CNVD-2017-07181)

Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. A remote attacker could exploit this vulnerability to change settings via a specially crafted URL...

CVE-2017-8100

There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings...

Atlassian Bamboo Information Disclosure Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x versions prior to 5.10.0 in the service, which can be exploited by remote attackers to obtain sensitive information,...

The vulnerability of the Android operating system allows a perpetrator to alter settings or circumvent security mechanisms, resetting them to factory settings.

The vulnerability of Android system configuration masters is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to alter settings or bypass security measures, restoring them to their factory defaults...

WordPress Plugin ClickBank Affiliate Ads 'clickbank-ads.php' Cross-Site Request Forgery Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on PHP and MySQL servers.ClickBank Affiliate Ads Plugin for WordPress is a plugin for wordpress. The WordPress plugin ClickBank Affiliate Ads...

WordPress plugin Redirection Page has multiple cross-site request forgery vulnerabilities

Redirection Page plugin is a redirection plugin for managing 301 redirects and tracking 404 errors. The WordPress plugin Redirection Page suffers from multiple cross-site request forgery vulnerabilities that allow remote attackers to hijack an administrator's credentials as 1 changing plugin...

WordPress Plugin Sliding Social Icons Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform using PHP language development , users can support PHP and MySQL database server to set up their own weblog . Sliding Social Icons plugin is a social icon to create a sliding effect of the plugin . WordPress plugin Sliding Social Icons has multiple cross-site...

Motorola SBG901 Wireless Modem - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability Google dork : N/A Exploit Author: Blessen Thomas Date : 06/01/2014 Vendor Homepage : http://www.arrisi.com/modems/ Software Link : N/A Version : Motorola SBG901 Wireless...

CVE-2013-3477

Cross-site request forgery CSRF vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors...

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Clipboard contents alteration vulnerability in Grani

Overview Grani contains a vulnerability in which the contents of the clipboard may be altered. Grani, a web browser provided by Fenrir, contains a vulnerability in which the contents of the clipboard may be altered. As a result, when Grani is being used under certain settings, the contents of the...

CUPS administrator web interface CSRF

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

DEBIAN-CVE-2010-0540

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...