cve-2016-4845_csrf

cve-2016-4845csrf Proof of concept for CSRF vulnerabilityCVE-2016-4825 on IO-DATA Recording Hard Disc Drive. License These codes are released under the MIT License. Please see LICENSE.txt...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Welcome to the official repository documenting the discovery and details of CVE-2025-26206 , a critical Cross-Site Request Forgery CSRF vulnerability in Sell Done Storefront v.1.0. Discovered by B. Sibhi , this...

CVE-2020-23592

CVE-2020-23592 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allow an unauthenticated, remote attacker to conduct a cross-site...

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...

CVE-2020-23585

CVE-2020-23585 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A remote attacker can conduct a cross-site request forgery CSRF attack on "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028". The vulnerability...

CVE-2024-57373

CSRF Vulnerability in LifestyleStore v1.0 📌 Overview This repository documents a Cross-Site Request Forgery CSRF vulnerability identified in the LifestyleStore v1.0 project. The flaw allows attackers to perform unauthorized actions on behalf of authenticated users, posing risks to data integrity...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

SCOPIA XT Desktop バージョン 8.3.915.4 における CSRF の悪用 このPoCは、SCOPIA XT Desktop バージョン 8.3.915.4 におけるクロスサイトリクエストフォージェリ（CSRF）の悪用方法について説明します。 SCOPIAについて ウェブサイト: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 クロスサイトリクエストフォージェリ（CSRF）について...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...

cve-2020-23127-PoC

cve-2020-23127-PoC CVE-2020-23127: https://www.cvedetails.com/cve/CVE-2020-23127/ Introduction This is my first CVE proof of concept and analysis. It was done as part of my cyber-security course on my 2nd year of Master in Computer Sciences at Université de Franche-Comté. I looked specifically fo...

CVE-2025-22963

Overview Cross-site request forgeryCSRF vulnerability in Teedy versions = v1.11 allows remote attackers to force an end user to change their user informationusername, password, etc... on the web application in which they're currently authenticated. Vulnerability User information change endpoint i...

CVE-2019-17633

CVE-2019-17633 Eclipse Che CSRF leading to RCE This bug allows a remote website to create and start an arbitrary docker container on machines running Che before versions 7.3.0 and 7.4.1 when a user visits a webpage. Vulnerability This is a CSRF bug that allows a remote website to create and start...

CVE-2026-13156

CVE-2026-13156 — MailerSend公式SMTP統合プラグイン !IMPORTANT 概要: WordPress用公式 MailerSend SMTP統合プラグイン （ 1.0.8）において、高深刻度のクロスサイト・リクエスト・フォージェリ（CSRF ）脆弱性（CVE-2026-13156）が発見されました。設定削除ハンドラ mailersendhandleconfigurationdelete...

CVE-2020-23587

CVE-2020-23587 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

CVE-2024-22939

target:https://github.com/sunkaifei/FlyCms version: v1.0 FlyCms v1.0 において、/system/article/categoryedit コンポーネント経由のクロスサイトリクエストフォージェリ CSRF の脆弱性が発見されました。 Poc root@kitploit: history.pushState'', '', '/' 成功:...

CVE-2024-10605

Affected Version: BloodBank Management System : 1.0 Vulnerability Information: Vulnerability Type: Cross Site Request Forgery CSRF Severity: HIGH Status: Unpatched Vulnerable Endpoint: Path: file/request.php Vulnerability Description: There is a Cross Site Request Forgery on this endpoint...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2025-39601

🚨 CVE-2025-39601 - WordPress Custom CSS, JS & PHP プラグイン WordPress Custom CSS, JS & PHP plugin CSRF PoC - WordPress Custom CSS, JS & PHP plugin By : Nxploited | Khaled Alenazi input type="hidden" name...