Lucene search
+L

22772 matches found

Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.15 views

PT-2025-53261

Cross-Site Request Forgery CSRF vulnerability in Alessandro Piconi Simple Keyword to Link simple-keyword-to-link allows Cross Site Request Forgery.This issue affects Simple Keyword to Link: from n/a through = 1.5...

8.8CVSS6.8AI score0.00124EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.7 views

WordPress plugin Advanced Classifieds & Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

4.3CVSS6.5AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.13 views

PT-2025-53324

V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated...

5.1CVSS6.7AI score0.00168EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.11 views

WordPress plugin WP Email Capture 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00124EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.14 views

PT-2025-53333

Name of the Vulnerable Software and Affected Versions Beward N100 H.264 VGA IP Camera version M2.1.6 Description The Beward N100 H.264 VGA IP Camera version M2.1.6 contains a cross-site request forgery issue. This allows attackers to perform administrative actions without proper validation of...

5.3CVSS6.4AI score0.00161EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.37 views

SOCA Access Control System 安全漏洞

SOCA Access Control System is an access control system from China's Sunchem SOCA. A security vulnerability exists in SOCA Access Control System version 180612, which stems from a lack of request validation and could lead to cross-site request forgery attacks...

5.3CVSS6.6AI score0.00222EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.12 views

PT-2025-53289

Name of the Vulnerable Software and Affected Versions Rustaurius Five Star Restaurant Reservations versions through 2.7.7 Description A Cross-Site Request Forgery CSRF issue exists in Rustaurius Five Star Restaurant Reservations restaurant-reservations, potentially allowing attackers to perform...

8.8CVSS6.5AI score0.00113EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Five Star Restaurant Reservations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00113EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Vimeotheque 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress Vimeotheque suffers from a cross-site request forgery vulnerability for which no detailed vulnerability details are currently available...

4.3CVSS5.7AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.11 views

PT-2025-53338

Name of the Vulnerable Software and Affected Versions Teradek VidiU Pro version 3.0.3 Description The Teradek VidiU Pro software contains a cross-site request forgery issue. This allows attackers to alter administrative passwords due to insufficient validation of requests. An attacker can create...

5.3CVSS6.7AI score0.00184EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.18 views

Teradek Cube 安全漏洞

Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.6, which stems from vulnerability to a cross-site request forgery attack that could result in a change of the administrator password...

5.1CVSS6.7AI score0.00203EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin My auctions allegro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.6AI score0.00124EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.13 views

PT-2025-53372

Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious web page with a form that submits requests to the /cgi-bin/pl web.cgi/util configlogin act endpoint to...

5.3CVSS6.9AI score0.00158EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.37 views

WordPress plugin Fast User Switching 安全漏洞

Fast User Switching is a plugin that allows site administrators to quickly switch between different user accounts, operating directly from the WordPress admin toolbar. WordPress Fast User Switching suffers from a cross-site request forgery vulnerability, and no details of the vulnerability are...

4.3CVSS5.7AI score0.00128EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.13 views

PT-2025-53255

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.32...

8.8CVSS6.9AI score0.00124EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.23 views

PT-2025-53240

Name of the Vulnerable Software and Affected Versions titopandub Evergreen Post Tweeter versions through 1.8.9 Description A Cross-Site Request Forgery CSRF issue exists in titopandub Evergreen Post Tweeter, potentially allowing for Stored Cross-Site Scripting XSS. The issue affects the...

8.8CVSS5.6AI score0.00117EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Simple Keyword to Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.6AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

Synaccess netBooter NP-0801DU 安全漏洞

Synaccess netBooter NP-0801DU is an intelligent power controller from Synaccess, Inc. A security vulnerability exists in Synaccess netBooter NP-0801DU version 7.4, which stems from a lack of request validation and could lead to cross-site request forgery attacks...

5.1CVSS6.6AI score0.00168EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.11 views

PT-2025-53353

Name of the Vulnerable Software and Affected Versions Synaccess netBooter NP-0801DU version 7.4 Description The software contains a cross-site request forgery condition that may allow attackers to perform administrative actions without sufficient request validation. An attacker can create malicio...

5.1CVSS6.5AI score0.00168EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53094

Name of the Vulnerable Software and Affected Versions WP Email Capture versions through 3.12.5 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge. Recommendations...

8.8CVSS6.5AI score0.00124EPSS
SaveExploits0References4
Rows per page
Query Builder