Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Matias s Shockingly Simple Favicon plugin = 1.8.2 versions...

CVE-2023-44246 WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Matias s Shockingly Simple Favicon plugin = 1.8.2 versions...

CVE-2023-44246

CVE-2023-44246 affects the WordPress plugin Shockingly Simple Favicon (Matias’s Shockingly Simple Favicon), versions ≤ 1.8.2. Root issue: Cross-Site Request Forgery (CSRF) vulnerability impacting settings updates; could allow unauthorized actions to be performed on behalf of a logged-in user. Imp...

CVE-2023-44246 WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Matias s Shockingly Simple Favicon plugin = 1.8.2 versions...

PT-2023-29170 · Unknown · Matias'S Shockingly Simple Favicon

Name of the Vulnerable Software and Affected Versions: Matias's Shockingly Simple Favicon plugin versions = 1.8.2 Description: A Cross-Site Request Forgery CSRF issue affects the plugin, allowing unauthorized actions to be performed on behalf of the user. Recommendations: For versions = 1.8.2,...

WordPress Plugin shockingly-simple-favicon Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Shockingly Simple Favicon Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-44246 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cb4ef9c92a27 Credits Nguyen...

favicon-erstellen.de Cross Site Scripting vulnerability OBB-3621729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out of bound memory in the library, allowing an attacker to cause an application crash by providing a maliciously crafted favicon...

MyBB Favicon 1.0 Cross Site Scripting

Exploit Title: MyBB PGM Favicon Plugin 1.0 – Cross-Site Scripting Date: May 2, 2023 Author: 0xB9 Twitter: @0xB9sec Software Link: https://community.mybb.com/mods.php?action=view&pid=1554 Version: 1.0 Tested On: Windows 10 Description: The favicon input in the settings doesn’t sanitize the favicon...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

Memory corruption

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

CVE-2023-32209

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox 113...

CVE-2023-32209

CVE-2023-32209 : A maliciously crafted favicon could lead to an out-of-memory crash in Mozilla Firefox. Affected product/version: Firefox prior to 113. Impact: potential crash due to memory exhaustion when processing a favicon. Root cause details are limited in the provided documents beyond favic...

CVE-2015-10116

A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. This affects the function installnewfavicon of the file admin/class-favicon-by-realfavicongenerator-admin.php. The manipulation leads to cross-site request forgery. It is...

CVE-2015-10116 RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgery

A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. This affects the function installnewfavicon of the file admin/class-favicon-by-realfavicongenerator-admin.php. The manipulation leads to cross-site request forgery. It is...

CVE-2015-10116

RealFaviconGenerator Favicon Plugin for WordPress (up to version 1.2.12) is affected. The vulnerability resides in install_new_favicon (admin/class-favicon-by-realfavicongenerator-admin.php), enabling cross-site request forgery (CSRF). Exploitation can be remotely initiated. A patch is available ...

WordPress plugin favicon-by-realfavicongenerator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...