CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

CVE-2020-23588

CVE-2020-23588 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a cross-sit...

cve-2016-4845_csrf

cve-2016-4845csrf Proof of concept for CSRF vulnerabilityCVE-2016-4825 on IO-DATA Recording Hard Disc Drive. License These codes are released under the MIT License. Please see LICENSE.txt...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 Vulnerabilidad CSRF: Permite Crear Clientes Falsos Nombre del Proyecto y URL del Repositorio :https://phpgurukul.com/client-management-system-using-php-mysql/ Nombre de la Vulnerabilidad : Cross-Site Request Forgery CSRF Versión Afectada : V1.2 Introducción Existe una vulnerabilida...

CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "N.º DE MODELO: OP-XT71000N" con "VERSIÓN DE HARDWARE: V2.2"; y "VERSIÓN DE FIRMWARE: OPV3.3.1-191028" Se encontró una vulnerabilidad en el "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" que permite a un atacante remoto no autentica...

CVE-2026-13156

CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Abstract: A High-Severity Cross-Site Request Forgery CSRF vulnerability CVE-2026-13156 was discovered in the official MailerSend SMTP Integration plugin for WordPress 1.0.8. The configuration eradication handler...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" Un atacante remoto puede realizar un ataque de falsificación de petición en sitios cruzados CSRF en "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version:...

CVE-2026-17047 IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...

CVE-2026-17047

IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are vulnerable to Cross-Site Request Forgery (CWE-352) in its GUI due to improper request validation. A remote attacker can exploit this to obtain sensitive information and cause low integrity impact (CVSS 5.4, MEDIUM). No specific exploit or in-the...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" vulnerabilidad encontrada en el "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" que permite a un atacante remoto no autenticado realizar un...

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

Deep-Reaver

Deep Reaver Deep Reaver es un potente kit de evaluación de vulnerabilidades y explotación mejorado con IA, construido en Python. Inspirado en herramientas como Nmap y Nessus, Deep Reaver está diseñado para un escaneo modular y profundo de aplicaciones web y servicios. Características Análisis...

CVE-2025-22963

概要 Teedy v1.11 以下のバージョンにおけるクロスサイトリクエストフォージェリCSRFの脆弱性により、リモートの攻撃者は、現在認証されているWebアプリケーション上でエンドユーザーに強制的にユーザー情報（ユーザー名、パスワードなど）を変更させることができます。 脆弱性 ユーザー情報変更エンドポイントは /api/user/:username です。 このエンドポイントは認可のためにCookie内のauthtokenのみをチェックします。 authtokenの値は他のオリジンのWebサイトから使用される可能性があります。 root@kitploit: POST...

CVE-2020-23587

CVE-2020-23587 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

ConceptronicIPCam_MultipleVulnerabilities

Múltiples vulnerabilidades en cámaras IP Conceptronic con firmware web 0.61.X. Se han encontrado vulnerabilidades CSRF y Denegación de Servicio en cámaras IP Conceptronic. CVE| Descripción ---|--- CVE-2018-6407| Vulnerabilidad de denegación de servicio remota no autenticada CVE-2018-6408| CSRF...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

CVE-2024-22939

target:https://github.com/sunkaifei/FlyCms version: v1.0 FlyCms v1.0 において、/system/article/categoryedit コンポーネント経由のクロスサイトリクエストフォージェリ CSRF の脆弱性が発見されました。 Poc root@kitploit: history.pushState'', '', '/' 成功:...

CVE-2025-39601

🚨 CVE-2025-39601 - CSRF to RCE in WordPress Custom CSS, JS & PHP plugin = 2.4.1 🧠 Description A Cross-Site Request Forgery CSRF vulnerability in the WPFactory Custom CSS, JS & PHP plugin allows for Remote Code Execution RCE by injecting malicious PHP code via unauthorized POST requests. This...