251 matches found
EUVD-2015-8481
Malware in sbrugna...
EUVD-2022-15347
Malicious code in bioql PyPI...
EUVD-2025-19094
Malicious code in bioql PyPI...
EUVD-2025-29011
Malicious code in bioql PyPI...
EUVD-2023-54040
Malicious code in bioql PyPI...
EUVD-2025-28272
Malicious code in bioql PyPI...
EUVD-2025-27649
Malicious code in bioql PyPI...
EUVD-2023-38909
Malicious code in bioql PyPI...
EUVD-2024-53646
Malicious code in bioql PyPI...
EUVD-2022-52952
Malicious code in bioql PyPI...
EUVD-2025-32282
The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for...
FairSketch RISE Ultimate Project Manager 安全漏洞
FairSketch RISE Ultimate Project Manager is a project management system from FairSketch, Inc. A security vulnerability exists in FairSketch RISE Ultimate Project Manager version 3.9.4, which originates from a JavaScript payload that can be stored by an administrator via File Explorer when creatin...
CVE-2025-9898 cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery
The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the cformsapi function. This makes it possible for unauthenticated attackers to modify...
CVE-2025-9887
The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation in the /frndzkadminclsw.php file. This makes it possible for unauthenticated attackers to change the...
CVE-2024-48341
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...
CVE-2024-48341
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...
CVE-2024-48341
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...
CVE-2024-48341
The CVE-2024-48341 entry concerns dingfanzu CMS V1.0, which has a Cross-Site Request Forgery (CSRF) flaw in the /admin/doAdminAction.php?act=addShop endpoint. The vulnerability is described with CVSSv3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N, base score 3.7 (LOW), indicating potential information ...
PT-2025-36498
Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The application suffers from a Cross-Site Request Forgery CSRF issue. This occurs through the /admin/doAdminAction.php?act=addShop component. Recommendations: Apply appropriate CSRF protection mechanisms...
