CVE-2022-1749: Cross-Site Request Forgery (CSRF)

The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createpluginatfadminsettingpage function found in the /inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and...

CVE-2022-31497

LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...

PT-2022-20765

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for patient XSS in the interface/main/finder/finder navigation.php file. Recommendations For LibreHealth EHR Base version 2.0.0, consider disabling access to the...

WordPress Browser and Operating System Finder plugin <= 1.2 - Unauthenticated Settings Reset vulnerability

Unauthenticated Settings Reset vulnerability discovered by WPScanTeam in WordPress Browser and Operating System Finder plugin versions = 1.2. Solution Deactivate and delete. This plugin has been closed as of May 18, 2022 and is not available for download. This closure is temporary, pending a full...

Browser and Operating System Finder <= 1.2 - Unauthenticated Settings Reset

The plugin does not have authorisation and CSRF check when resetting its settings, allowing unauthenticated users to reset them https://example.com/?type=reset-all...

WordPress WPMK Ajax Finder plugin <= 1.0.1 - Stored Cross-Site Scripting (XSS) via CSRF vulnerability

Stored Cross-Site Scripting XSS via CSRF vulnerability discovered by Tsubasa Imaizumi Cryptography Laboratory in Tokyo Denki University in WordPress WPMK Ajax Finder plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of May 17, 2022 and is not available for...

new packages: redfish-finder

An update is available for redfish-finder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

SSRFire - An Automated SSRF Finder. Just Give The Domain Name And Your Server And Chill! Also Has Options To Find XSS And Open Redirects

An automated SSRF finder. Just give the domain name and your server and chill! ; It also has options to find XSS and open redirects. Syntax ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- The domain for which you want to test yourserver.com --- Your server...

[SECURITY] Fedora 34 Update: rust-skim-0.9.4-8.fc34

Fuzzy Finder in rust!...

Fedora: Security Advisory for rust-skim (FEDORA-2022-7ec8bda833)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-skim-0.9.4-8.fc35

Fuzzy Finder in rust!...

CVE-2021-20851

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

CVE-2021-20851

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

CVE-2021-20851

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

CVE-2021-20851

CVE-2021-20851 affects the WordPress plugin Browser and Operating System Finder (versions prior to 1.2). The vulnerability is a CSRF flaw in the plugin that can allow an administrator, when viewing a malicious page while logged in, to perform unintended actions, possibly hijacking the admin’s ses...

PT-2021-14294

Name of the Vulnerable Software and Affected Versions: Browser and Operating System Finder versions prior to 1.2 Description: A cross-site request forgery CSRF issue allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors. This can lead to...

CVE-2021-20851: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...

WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery

Overview WordPress Plugin "Browser and Operating System Finder" provided by Aftab Muni contains a cross-site request forgery vulnerability CWE-352. imai shinpei of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University reported and coordinated with...