GitLab跨站请求伪造漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site request forgery vulnerability exists in Gitl...

Bosch PRAESIDEO and Bosch PRAESENSA Cross-Site Request Forgery Vulnerabilities

Bosch Praesideo and Bosch Praesensa are both products of Bosch, Germany.Bosch Praesideo is a device for digital broadcasting in public places. The device can provide daily information dissemination, emergency broadcasting, fire alarm and other functions for buildings and public places.Bosch...

The vulnerability in the web-based management interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 allows a intruder to perform arbitrary actions on the vulnerable device.

The vulnerability in the web interface of Cisco Mobility Express software for Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Cisco Catalyst 9100, and Cisco 6300 is related to the manipulation of inter-site requests. Exploiting this vulnerability allows an attacker to...

rConfig Cross-Site Request Forgery Vulnerability

rConfig is an open source network configuration management utility . A cross-site request forgery vulnerability exists in rConfig version 3.9.4, which stems from the program not properly validating user input. A remote attacker can exploit this vulnerability to perform malicious actions via...

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) system allows a perpetrator to perform arbitrary actions on the vulnerable device.

The vulnerability of the Web interface for controlling the Cisco Data Center Network Manager DCNM system is related to the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to perform arbitrary actions on the vulnerable device.

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager DCNM system is related to the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

The vulnerability of the “Forgot Password” function in the server management application CentOS Web Panel allows a hacker to perform arbitrary actions on a vulnerable device.

The vulnerability of the “Forgot Password” function in the CentOS Web Panel server management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device remotely...

IBM Cognos Business Intelligence Cross-Site Request Forgery Vulnerability

IBM Cognos Business Intelligence BI is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site request forge...

The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to perform arbitrary actions on the vulnerable device.

The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 is related to a predictable algorithm for token generation. Exploiting this vulnerability allows an attacker operating remotely to perform arbitrary...

CVE-2019-9231

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery CSRF vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions,...

CVE-2019-1857

A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for...

Kibana Cross-Site Scripting Vulnerability (CNVD-2019-12162)

Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A cross-site scripting vulnerability exists in Kibana versions prior to 5.6.15 and prior to 6.6.1. A remote attacker could exploit this vulnerability to...

Mozilla Firefox Cross-Site Request Forgery Vulnerability

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A cross-site request forgery vulnerability exists in Mozilla Firefox versions prior to 61, Firefo...

TPLink #TLWR840N / #TLWR841N - Authenticaton Bypass Vulnerability

Exploit for hardware platform in category web applications Title: TP-Link Multiple RouterTL-WR840N and TL-WR841N Unauthenticated Router Access Vulnerability Author: BlackFog Team Website: SecureLayer7.net Contact: email protected Version: 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n Hardware:...

Wordpress Codestyling Localization plugin multiple cross-site request forgery vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Codestyling Localization is one of the localization language development translation package plugin. Multiple...

Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco USA that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for computing, networking, storage, and other data center resources. A cross-site request forge...

CVE-2018-0107

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by...

PT-2017-12446 · Cisco · Cisco Spa500 Series Ip Phones +1

Name of the Vulnerable Software and Affected Versions: Cisco SPA300 and SPA500 Series IP Phones affected versions not specified Description: A lack of cross-site request forgery CSRF protection in the Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to...

IBM Emptoris Services Procurement Cross-Site Request Forgery Vulnerability

IBM Emptoris Services Procurement is a procurement management system from IBM USA. The system controls and manages the procurement lifecycle for third-party service categories. A cross-site request forgery vulnerability exists in IBM Emptoris Services Procurement version 10.x. A remote attacker...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-08540)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.18 and earlier. A remote attacker can exploit this vulnerability to perform unauthoriz...