Lucene search
+L

22757 matches found

CVE
CVE
added 2026/05/25 7:30 p.m.42 views

CVE-2026-9486

Technical details about CVE-2026-9486 are not publicly available in the provided documents; no affected component, root cause, or remediation is specified. Monitor for updates from official sources.

5.3CVSS5.4AI score0.00187EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/25 7:30 p.m.38 views

CVE-2026-9486 SourceCodester Student Grades Management System cross-site request forgery

A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

5.3CVSS0.00187EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/25 7:30 p.m.11 views

CVE-2026-9486 SourceCodester Student Grades Management System cross-site request forgery

A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

5.3CVSS5.4AI score0.00187EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/25 7:30 p.m.17 views

EUVD-2026-31726

A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks...

5.3CVSS5.4AI score0.00187EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/25 3:16 p.m.25 views

CVE-2018-25363

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from...

5.3CVSS0.00199EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/25 2:15 p.m.17 views

EUVD-2018-21893

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

6.9CVSS5.7AI score0.00192EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/25 2:15 p.m.12 views

CVE-2018-25370 Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting rolesfunction.php with parameters like rolassignroles, rolapproveusers, and...

6.9CVSS5.7AI score0.00192EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/25 2:15 p.m.32 views

CVE-2018-25370

CVE-2018-25370 affects Admidio 3.3.5. A cross-site request forgery vulnerability allows low-privilege users to increase permissions by exploiting improper origin checking in roles_function.php. Attacks can craft malicious HTML forms targeting parameters such as rol_assign_roles, rol_approve_users...

6.9CVSS5.7AI score0.00192EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/25 2:15 p.m.32 views

CVE-2018-25363

CVE-2018-25363 – Twitter-Clone 1 CSRF : The vulnerability allows remote attackers to coerce authenticated users into deleting posts by crafting hidden HTML forms targeting tweetdel.php with tweet IDs and auto-submitting them. The issue arises from a cross-site request forgery that can delete arbi...

5.3CVSS5.9AI score0.00199EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/25 2:15 p.m.13 views

CVE-2018-25363

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from...

5.3CVSS5.9AI score0.00199EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/05/25 2:15 p.m.39 views

CVE-2018-25363 Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from...

5.3CVSS0.00199EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/25 2:15 p.m.14 views

CVE-2018-25363 Twitter-Clone 1 Cross-Site Request Forgery via tweetdel.php

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from...

5.3CVSS5.9AI score0.00199EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/05/25 11:16 a.m.194 views

dvwa_web_security_labs

DVWA Web Security Labs Project Description This project c...

6AI score
SaveExploits0
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.19 views

WordPress plugin Export WP Page to Static HTML/CSS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin...

6.5CVSS5.6AI score0.0014EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.17 views

Admidio 跨站请求伪造漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums, and downloads. A cross-site request forgery vulnerability exists in Admidio version 3.3.5, which stems from cross-site request forgery and could...

6.9CVSS5.7AI score0.00192EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.41 views

PT-2026-43138

Name of the Vulnerable Software and Affected Versions WPSubscription versions prior to 1.9.2 Description A Cross-Site Request Forgery CSRF flaw exists in the Convers Lab WPSubscription plugin. This issue allows an attacker to induce a victim to perform unintended actions on the web application by...

4.3CVSS5.8AI score0.00122EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.13 views

PT-2026-43222

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles function.php with parameters like rol assign roles, rol approve users, a...

6.9CVSS5.7AI score0.00192EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/25 12:00 a.m.18 views

twitter-clone 跨站请求伪造漏洞

twitter-clone is an application by Fiffe Individual Developers. twitter-clone uses + Vue 3 + light to go development + TailwindCSS + PostgreSQL + recapitulate A cross-site request forgery vulnerability exists in twitter-clone version 1, which stems from cross-site request forgery and could allow ...

5.3CVSS5.8AI score0.00199EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.36 views

PT-2026-43128

Name of the Vulnerable Software and Affected Versions Recorp Export WP Page to Static HTML/CSS versions prior to 6.0.0 Description A Cross-Site Request Forgery CSRF issue exists, which allows an attacker to perform unauthorized actions by tricking a victim into submitting a malicious request. CSR...

6.5CVSS6AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/25 12:00 a.m.34 views

PT-2026-43129

Name of the Vulnerable Software and Affected Versions Organization chart versions prior to 1.7.6 Description A Cross-Site Request Forgery CSRF flaw exists in WpDevArt Organization chart. This issue allows an attacker to perform unauthorized actions by tricking a victim into submitting a malicious...

4.3CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Rows per page
Query Builder