CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

PT-2024-30808 · WordPress · Wp Armour Extended

Name of the Vulnerable Software and Affected Versions: WP Armour Extended versions 1.26 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

PT-2024-30503 · Brave · Brave Popup Builder

Name of the Vulnerable Software and Affected Versions: Brave Popup Builder versions 0.7.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...

CVE-2024-6977

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

PT-2024-24401 · WordPress · Wp Migration Plugin Db & Files – Wp Synchro

Name of the Vulnerable Software and Affected Versions: WP Migration Plugin DB & Files – WP Synchro versions 1.11.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Migration Plugin DB & Files – WP Synchro. This issue allows for malicious requests to be made on behal...

CVE-2024-20282

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this...

PT-2024-14096 · Woocommerce · Customize My Account For Woocommerce

Name of the Vulnerable Software and Affected Versions: Customize My Account for WooCommerce versions 1.8.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in Customize My Account for WooCommerce. This type of vulnerability allows an attacker to trick a user...

PT-2024-14239 · WordPress · Duplicator – Wordpress Migration & Backup Plugin

Name of the Vulnerable Software and Affected Versions: Duplicator – WordPress Migration & Backup Plugin versions 1.5.7 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Duplicator – WordPress Migration & Backup Plugin. This issue allows for malicious requests to be made...

PT-2023-30949 · Codeastrology · Quantity Plus Minus Button For Woocommerce

Name of the Vulnerable Software and Affected Versions: Quantity Plus Minus Button for WooCommerce by CodeAstrology versions 1.1.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

Microsoft named a Leader in 2023 Gartner® Magic Quadrant™ for Access Management for the 7th year​​

Protecting identity from compromise is top of mind for security professionals as identity attacks continue to intensify. Earlier this year we reported that we had observed a nearly three-fold increase in password attacks per second in the last two years, from 579 in 2021 to 4,000 in 2023.1 Identi...

PT-2023-30147 · Jenkins · Jenkins Zanata Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Zanata Plugin versions 0.6 and earlier Description: The issue is related to the use of a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal. This potentially allows...

PT-2023-20304 · WordPress · Saphali Woocommerce Lite

Name of the Vulnerable Software and Affected Versions: Saphali Woocommerce Lite plugin versions = 1.8.13 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

Cross-Site Request Forgery (CSRF)

cockpit-hq/cockpit is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists because it does not use a csrf token, which allows an attacker to execute arbitrary commands on the system as an administrator...

PT-2023-15316 · Joseph C Dolson · My Tickets

Name of the Vulnerable Software and Affected Versions: Joseph C Dolson My Tickets plugin versions = 1.9.10 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a we...

PT-2022-28131 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks a user into performing unintended actions on a web application...

JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91662)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...