10 matches found
CVE-2025-29722
ЁЯЫбя╕П CVE-2025-29722 тАУ рдХреНрд░реЙрд╕ рд╕рд╛рдЗрдЯ рд░рд┐рдХреНрд╡реЗрд╕реНрдЯ рдлреЙрд░реНрдЬрд░реА CSRF Commercify v1.0 рдореЗрдВ рджреНрд╡рд╛рд░рд╛ рдЦреЛрдЬрд╛ рдЧрдпрд╛: David P.S Abraham рдЙрд░реНрдл Davycipher CVE ID CVE-2025-29722 рдХреЛ MITRE Corporation рджреНрд╡рд╛рд░рд╛ рдпрд╣ рднреЗрджреНрдпрддрд╛ рдирд┐рд░реНрдзрд╛рд░рд┐рдд рдХреА рдЧрдИ рд╣реИред рд╕рд╛рд░рд╛рдВрд╢ рдПрдХ CSRF рднреЗрджреНрдпрддрд╛ рдХреА рдкрд╣рдЪрд╛рди Commercify v1.0 рдореЗрдВ рдХреА рдЧрдИ, рдЬреЛ @yassmittal рджреНрд╡рд╛рд░рд╛ рд╡рд┐рдХрд╕рд┐рдд рдПрдХ...
EUVD-2025-14818
Malicious code in bioql PyPI...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
CVE-2025-29722
CVE-2025-29722 is a CSRF vulnerability in Commercify v1.0 due to missing CSRF protection on sensitive endpoints. The root cause is lack of CSRF tokens with permissive cookies/CORS, enabling attackers to perform unauthorized actions on behalf of authenticated users (example: settings changes via e...
CVE-2025-29722
A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...
Commercify хоЙхЕиц╝Пц┤Ю
Commercify is an e-commerce website by the individual developer Yash Mittal. A security vulnerability exists in version 1.0 of Commercify, which stems from a lack of CSRF protection on sensitive endpoints and could lead to cross-site request forgery attacks...
PT-2025-17215 ┬╖ Unknown ┬╖ Commercify
Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...