CVE-2014-7281: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53CN allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to goform/SysToolReboot...

CVE-2014-8073: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of administrators for requests that add a new user via a Save User action to admin/users/user.form...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-7407: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-3422

Name of the Vulnerable Software and Affected Versions Drupal MRBS module affected versions not specified Description A cross-site request forgery CSRF issue in the MRBS module for Drupal allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not...

CVE-2014-8331

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the...

CVE-2012-5695

Multiple cross-site request forgery CSRF vulnerabilities in Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct 1 shell metacharacter or 2 SQL injection attacks or 3 send an SMS message...

PT-2014-8475

Name of the Vulnerable Software and Affected Versions Huawei HiLink E3236 versions before E3236sTCPU-V200R002B470D13SP00C00 Huawei HiLink E3236 versions before E3236sWebUI-V100R007B100D03SP01C03 Huawei HiLink E3276 versions before E3276sTCPU-V200R002B146D41SP00C00 Huawei HiLink E3276 versions...

CVE-2012-5695: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Bulb Security Smartphone Pentest Framework SPF 0.1.2 through 0.1.4 allow remote attackers to hijack the authentication of administrators for requests that conduct 1 shell metacharacter or 2 SQL injection attacks or 3 send an SMS message...

CVE-2014-8331: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei HiLink E3236 before E3276sTCPU-V200R002B470D13SP00C00 and E3276sWebUI-V100R007B100D03SP01C03 and E3276 before E3236sTCPU-V200R002B146D41SP00C00 and E3236sWebUI-V100R007B100D03SP01C03 allow remote attackers to hijack the...

PT-2014-2356

Name of the Vulnerable Software and Affected Versions Bulb Security Smartphone Pentest Framework SPF versions 0.1.2 through 0.1.4 Description The issue allows remote attackers to hijack the authentication of administrators for requests, potentially leading to shell metacharacter, SQL injection...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create administrative users, 2 remove...

CVE-2014-2358

The CVE-2014-2358 issue affects Fox DataDiode Appliance proxy server’s administrative web interface (all versions up to 1.7.1). It is a CSRF vulnerability that lets remote attackers hijack administrator sessions to perform actions such as creating/removing admin users and changing permissions. Th...

CVE-2014-2358: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create administrative users, 2 remove...

PT-2014-8324

Name of the Vulnerable Software and Affected Versions HP System Management Homepage SMH versions prior to 3.2.3 on HP-UX B.11.23 HP System Management Homepage SMH versions prior to 3.2.8 on HP-UX B.11.31 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the...

CVE-2014-7874: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2060

The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors...

PT-2014-4466

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 1.551 Jenkins LTS versions prior to 1.532.2 Description A session fixation issue allows remote attackers to hijack web sessions via vectors involving the override of Jenkins cookies. Recommendations For versions prior...

PT-2014-4780

Name of the Vulnerable Software and Affected Versions Twitget plugin versions prior to 3.3.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to "wp-admin/options-general.php". This is du...

CVE-2014-2066: Improper Authentication

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies...