11 matches found
CVE-2026-26235
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication...
CVE-2026-26235 JUNG Smart Visu Server 1.1.1050 - 'JUNG Smart Visu Server' Missing Authentication
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication...
PT-2026-7815
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication...
EUVD-2021-11692
Malware in sbrugna...
kentico-xperience13-AuthBypass-wt-2025-0011
WT-2025-0011 CVE not assigned yet Kentico Xperience 13 CMS -...
PT-2024-17595 · WordPress · Post To Pdf
Name of the Vulnerable Software and Affected Versions: Post to Pdf plugin for WordPress versions up to, and including, 1.0 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'gmptp single post' shortcode due to insufficient input sanitization and output escaping on...
WordPress Single Post Exporter plugin cross-site request forgery vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . Single Post Exporter plugin is a WordPress open source application plugin. WordPress Single Post Exporter plugin in version 1.1 and earlier contains a cross-site request forgery vulnerability, whic...
CVE-2021-24780
The Single Post Exporter WordPress plugin through 1.1.1 does not have CSRF checks when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and give access to the export feature to any role such as subscriber. Subscriber users would then be able...
CVE-2021-24780
The CVE-2021-24780 entries describe a CSRF vulnerability in the WordPress plugin “Single Post Exporter” versions up to 1.1.1, where saving settings lacks CSRF checks. Root cause: missing CSRF validation in the settings update function, which can let an authenticated attacker change settings and g...
WordPress 插件跨站请求伪造漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . Single Post Exporter plugin is a WordPress open source application plugin. WordPress Single Post Exporter plugin in version 1.1 and earlier contains a cross-site request forgery vulnerability, whic...
WordPress Single Post Exporter plugin <= 1.1.1 - Cross-Site Request Forgery (CSRF) vulnerability leading to Plugin Settings Update
Cross-Site Request Forgery CSRF vulnerability leading to Plugin Settings Update discovered by Francesco Carlucci in WordPress Single Post Exporter plugin versions = 1.1.1. Solution Deactivate and delete. This plugin has been closed as of September 23, 2021 and is not available for download. This...