PT-2026-94099

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 commit e01e41ecc Description Cross-site request forgery occurs because the endpoint 'objects/videoAddNew.json.php' disables the automatic CSRF guard $global'skipAutoCSRFCheck' and the untrusted-request check...

CVE-2024-39326

SkillTree is a micro-learning gamification platform. Prior to version 2.12.6, the endpoint "/admin/projects/projectname/skills/skillname/video" and probably others is open to a cross-site request forgery CSRF vulnerability. Due to the endpoint being CSRFable e.g POST request, supports a content...

CVE-2024-39326: Cross-Site Request Forgery (CSRF)

SkillTree is a micro-learning gamification platform. Prior to version 2.12.6, the endpoint /admin/projects/projectname/skills/skillname/video and probably others is open to a cross-site request forgery CSRF vulnerability. Due to the endpoint being CSRFable e.g POST request, supports a content typ...

SkillTree Security Vulnerabilities

SkillTree is a micro-learning gamification platform open-sourced by the National Security Agency. Provides out-of-the-box UI visualization, a convenient client integration library, and a dashboard for managing the creation and management of gamified training profiles. A security vulnerability...

The vulnerability of the microprogrammed Wi-Fi camera software of Rubetek RV-3406, RV-3409, and RV-3411 lies in the lack of protection for transmitted data, allowing intruders to intercept and modify video data from the cameras.

The vulnerability of the Microprogrammed Wi-Fi cameras Rubetek RV-3406, RV-3409, and RV-3411 lies in the lack of protection for transmitted data. Exploiting this vulnerability could allow a remote attacker to intercept and modify video data from the cameras...