CVE-2024-31320

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2021-32563

An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program based on the file type without user confirmation. This could be used to achieve code execution...

CVE-2022-3750

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation...

PT-2022-24015 · WordPress +1 · Ask Me

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows for the deletion of a post without using a nonce or prompting for confirmation, which is a result of a CSRF vulnerability. Recommendations: At the moment, there is no...