1471 matches found
Warning: "No usable ciphers configured on the SSL vserver/service" On NetScaler
When a certificate is removed or added to the SSL or NetScaler Gateway virtual server, the warning message, “No usable ciphers configured on the SSL vserver/service” is displayed...
Cross-Site Request Forgery (CSRF) in justingit/dada-mail
✍️ Description Attacker able to Add any number of subscriber with CSRF attack. In CSRF attacks it is necessary that a user logged into your application and just going to a malicious website and after that only with a redirection attacker can perform attack on unprotected endpoint, this means only...
CVE-2020-19264
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
CVE-2020-19264
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
Cross site request forgery (csrf)
A cross-site request forgery CSRF in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd...
CVE-2020-19264
MipCMS v5.0.1 has a cross-site request forgery (CSRF) vulnerability in the user-creation path index.php?s=/user/ApiAdminUser/itemAdd. The root cause is insufficient validation/CSRF protection, allowing an attacker to arbitrarily add users without authentication. The CVE-2020-19264 entry is refere...
Improper Privilege Management in microweber/microweber
✍️ Description A simple user without Super Admin access is able to add further users to the system. 🕵️♂️ Proof of Concept BurpSuite or proxy utility is required - 1;Simply add a simple User roled user USER A . - 2; Log in with USER A - 3; Obtain the X-Csrf-Token and the Cookie value of USER A - 4;...
Dswjcms 跨站请求伪造漏洞
Dswjcms is for individuals and personal lending launched a free p2p open source project , based on the Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site request forgery vulnerabilit...
MipCMS 跨站请求伪造漏洞
MipCMS is a software application. A set of content management system based on Baidu Mobile Accelerator MIP and development, but also a set of SEO site building system. MipCMS version 5.0.1 has a security vulnerability, the vulnerability stems from the lack of valid validation in the software...
PT-2021-6480 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the add partition function in the Linux kernel, specifically in the block/partitions/core.c file. This issue can be exploited by a local attacker wit...
CVE-2021-22025
The vRealize Operations Manager API 8.x prior to 8.5 contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster...
CVE-2021-22449
There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device...
CVE-2020-19669
Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...
GPAC has an unspecified vulnerability
A security vulnerability exists in GPAC Project Advanced Content, an open source multimedia framework, which stems from multiple exploitable integer overflow vulnerabilities in the MPEG-4 decoding functionality of Advanced Content. A specially crafted MPEG-4 file input could cause an integer...
CVE-2020-28846
Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...
GPAC Project Advanced Content 缓冲区错误漏洞
GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...
CVE-2020-18460
711cms v1.0.7 is vulnerable to Cross Site Request Forgery (CSRF). The issue allows an attacker to cause the application to add an admin account via the endpoint admin.php?c=Admin&m=content. The provided connected records confirm the affected product/version and the vulnerable operation, with CSRF...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...