Lucene search
+L

137 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•28 views

CVE-2021-33492

OX App Suite 7.10.5 allows XSS via an OX Chat room name...

6.1CVSS5.8AI score0.01149EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•14 views

CVE-2021-33494

OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering...

6.1CVSS5.8AI score0.01149EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/11/11 12:11 a.m.•15 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS6.8AI score0.00147EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/10 3:31 p.m.•13 views

EUVD-2025-44061

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.3AI score0.00147EPSS
SaveExploits1References3
OSV
OSV
•added 2025/11/10 3:15 p.m.•15 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS5.9AI score0.00147EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/10 3:15 p.m.•22 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS0.00147EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/10 12:00 a.m.•33 views

CVE-2025-63710

The SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) due to the send_message.php endpoint lacking essential security measures such as tokens , nonces , or same-site cookie restrictions . An attacker can trick an authenticated user into visiting a malic...

6.4AI score0.00147EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•17 views

PT-2025-46161

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Public Chat Room version 1.0 Description The application lacks CSRF-protection mechanisms like tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page that, when visited by an...

6.5AI score0.00147EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/10 12:00 a.m.•8 views

CVE-2025-63710

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.3AI score0.00147EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•16 views

SourceCodester Simple Public Chat Room 安全漏洞

SourceCodester Simple Public Chat Room is a simple public chat room in SourceCodester open source. A security vulnerability exists in SourceCodester Simple Public Chat Room version 1.0, which stems from the sendmessage.php endpoint that does not implement a CSRF protection mechanism, which could...

6.5CVSS6.6AI score0.00147EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•0 views

CVE-2025-63710: Cross-Site Request Forgery (CSRF)

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

6.5CVSS5.9AI score0.00147EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2021-24159

Malware in sbrugna...

7.5CVSS7.4AI score0.02329EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2007-0831

Malware in sbrugna...

6.8CVSS6.4AI score0.01191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2015-8479

Malware in sbrugna...

5CVSS6.4AI score0.01233EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2003-1178

Malware in sbrugna...

5CVSS6.4AI score0.01697EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-20195

Malware in sbrugna...

6.1CVSS6.2AI score0.01149EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-0864

Malware in sbrugna...

5CVSS6.4AI score0.01162EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-20197

Malware in sbrugna...

6.1CVSS6.2AI score0.01149EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-22290

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00334EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-27994

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00254EPSS
SaveExploits0References1
Rows per page
Query Builder