17047 matches found
CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
HackerOne: Organization members can delete reports in teams they have no access to
Reports in teams could be deleted by organization members without access to those teams. The vulnerability allowed deletion of analytics reports for restricted teams through a GraphQL mutation even when members lacked permissions to view or edit those reports...
PT-2023-29404
Name of the Vulnerable Software and Affected Versions YAS Global Team Permalinks Customizer plugin versions = 2.8.2 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...
CVE-2023-45103: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Permalinks Customizer plugin = 2.8.2 versions...
Mars: Test 4 █████
This is test team summary with limited disclosure...
Elon Musk Is Personally Undermining X’s Efforts to Curb Israel-Hamas War Disinformation
X’s Trust and Safety team says it’s working to remove false information related to the Israel-Hamas war. Meanwhile, Elon Musk is sharing conspiracies and chatting with QAnon promoters...
CVE-2023-41694
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...
CVE-2023-41694
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...
CVE-2023-41694 WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Realbig Team Realbig For WordPress plugin = 1.0.3 versions...
CVE-2023-41694
CVE-2023-41694 is a Cross-Site Forgery (CSRF) vulnerability in Realbig For WordPress, affecting Realbig plugin versions
Security Updates for Microsoft Team Foundation Server and Azure DevOps Server (October 2023)
The Microsoft Team Foundation Server or Azure DevOps install is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on...
Fixed in Apache Tomcat 10.1.14
Important: Request smuggling CVE-2023-45648 Tomcat did not correctly parse HTTP trailer headers. A specially crafted, invalid trailer header could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. This was fixe...
CVE-2023-41801
Cross-Site Request Forgery CSRF vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin = 4.3 versions...
CVE-2023-41801
CVE-2023-41801 : AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin versions ≤ 4.3 are affected by a Cross-Site Request Forgery (CSRF) vulnerability. The issue is mitigated by upgrading to version 4.3.1, which is listed as the fix. Public exploitation details are not provided ...
CVE-2023-27448
Overview: CVE-2023-27448 affects the WordPress MakeStories (for Google Web Stories) plugin. According to Patchstack, vulnerable versions are 3.0.2, specifically 3.0.3 or later. The Red Hat/NVD entries corroborate the CSRF vector, but the Patchstack entry provides the concrete fixed version. Prac...
CVE-2023-41801: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in AWP Classifieds Team Ad Directory & Listings by AWP Classifieds plugin = 4.3 versions...
CVE-2023-27448: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in MakeStories Team MakeStories for Google Web Stories plugin = 2.8.0 versions...