CVE-2026-31014

Dovestones Softwares AD Self Update 4.0.0.5 is vulnerable to Cross Site Request Forgery CSRF. The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally...

CVE-1999-0901

ypserv allows a local user to modify the GECOS and login shells of other users...

EUVD-2001-1350

Malware in sbrugna...

EUVD-2018-20584

Malware in sbrugna...

EUVD-2021-25753

Malware in sbrugna...

EUVD-2013-4806

Malware in sbrugna...

EUVD-2018-11249

Malware in sbrugna...

EUVD-2016-9902

Malware in sbrugna...

EUVD-2000-0434

Malware in sbrugna...

EUVD-2018-11085

Malware in sbrugna...

EUVD-2018-19433

Malware in sbrugna...

EUVD-2025-5841

Malicious code in bioql PyPI...

EUVD-2022-3995

Malicious code in bioql PyPI...

EUVD-2025-5835

Malicious code in bioql PyPI...

CVE-2024-46892

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application does not properly invalidate sessions when the associated user is deleted or disabled or their permissions are modified. This could allow an authenticated attacker to continue performing...

CVE-2020-36191

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an xsrf field, as demonstrated by a /hub/api/user request to add or remove a user account...

CVE-2013-5313

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

CVE-2018-19560

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...

CVE-2025-46744

CVE-2025-46744 describes an authenticated administrator privilege‑escalation flaw: the attacker can modify the Created By username on a user account. Public references tie this to Schweitzer Engineering Laboratories (SEL) products (e.g., SEL‑5033 acSELerator RTAC software and related tools) and m...

CVE-2025-46744 Improper Privilege Management

An authenticated administrator could modify the Created By username for a user account...