CVE-2024-51435

bloodbank A simple csrf poc found on blood bank system v 1.0...

CVE-2026-5702

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

EUVD-2026-112743

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702

The SABBATIC application is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to trick an authenticated user into interacting with a malicious link or page, which then sends unauthorized requests to a vulnerable endpoint. No specific technical r...

CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Cross-Site Request Forgery CSRF vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint...

SABBATIC app cross-site request forgery vulnerability

Versions prior to 7.96.0.1 and prior to 7.96.0.2 of the SABBATIC app contain a cross-site request forgery vulnerability. This vulnerability arises from cross-site request forgery, allowing attackers to trick authenticated users into clicking malicious links or loading pages, thereby sending...

CVE-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials fr...

CVE-2026-117574

A vulnerability exists in ai-gateway-payload-processing due to an authorization bypass (CWE-639). An authenticated remote attacker can submit a request containing a different tenant's model identifier in the request body or header. Because the service fails to verify authorization before retrievi...

CVE-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials fr...

EUVD-2026-112460

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials fr...

CVE-2026-117574

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials fr...

CVE-2026-67077

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

EUVD-2026-112033

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

CVE-2026-67077

HCL BigFix AEX is impacted by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918, CWE-441, CWE-610). This flaw allows an attacker to force the application to transmit unauthorized requests to external resources. Consequences of successful exploitation include sensitive information disclo...

CVE-2026-67077 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...

HCL BigFix AEX server request forgery vulnerability

The HCL BigFix AEX v13.0.0.1 version contains a security vulnerability stemming from its susceptibility to server-side request forgery attacks. Attackers can exploit this flaw to cause the application to send unauthorized requests to external resources, thereby gaining access to unintended...

PT-2026-129173

Name of the Vulnerable Software and Affected Versions ai-gateway-payload-processing affected versions not specified Description An authenticated remote attacker can perform unauthorized requests and consume another tenant's large language model LLM resources and quotas. The issue occurs because t...

CVE-2026-117574: Red Hat Red Hat OpenShift AI (RHOAI): A flaw was found in ai-gateway-payload-processing

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials fr...

CVE-2026-67077: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the…

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or...