CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

CVE-2019-9688

CVE-2019-9688 (sftnow) is a CSRF vulnerability in sftnow up to 2018-12-29 that allows an attacker to trigger index.php?g=Admin&m=User&a=add_post to add an admin account. Connected sources confirm a cross-site request forgery flaw exists in sftnow 2018-12-29 and earlier versions. The provided docu...

CVE-2019-9688

sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=addpost CSRF to add an admin account...

DirectAdmin 1.55 - CMD_ACCOUNT_ADMIN Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit title: DirectAdmin v1.55 - CSRF via CMDACCOUNTADMIN Admin Panel Exploit Author: ManhNho Vendor Homepage: https://www.directadmin.com/ Software Link: https://www.directadmin.com/ Demo Link: https://www.directadmin.com:2222/CMDACCOUNTADM...

DirectAdmin 1.55 - 'CMD_ACCOUNT_ADMIN' Cross-Site Request Forgery

Exploit title: DirectAdmin v1.55 - CSRF via CMDACCOUNTADMIN Admin Panel Date: 03/03/2019 Exploit Author: ManhNho Vendor Homepage: https://www.directadmin.com/ Software Link: https://www.directadmin.com/ Demo Link: https://www.directadmin.com:2222/CMDACCOUNTADMIN Version: 1.55 CVE: CVE-2019-9625...

CVE-2018-17429

/console/account/manage.php?type=action&action=add in JTBC v3.0C has CSRF for adding an administrator account...

Cross site request forgery (csrf)

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

CVE-2019-9625

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

CVE-2019-9625

JBMC DirectAdmin 1.55 allows CSRF via the /CMDACCOUNTADMIN URI to create a new admin account...

JetBrains Security Bulletin Q4 2018

News Security JetBrains Security Bulletin Q4 2018 Robert Demmer We have resolved a series of security issues in our products in the fourth quarter of 2018. Here’s a report summary with descriptions of each issue and the version in which they were resolved. Product | Description | Severity |...

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

Cross site request forgery (csrf)

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...

CVE-2019-7737

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...

CVE-2019-7737

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...

CVE-2019-7737

A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit...

CVE-2019-7737

Verydows v2.0 is affected by a CSRF vulnerability that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit. The issue is documented in CVE-2019-7737 with NVD metrics indicating high impact (C/H/I/A) and network attack vector, requiring no authentication. Connected sources c...

CVE-2018-20780

Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...

CVE-2018-20780

Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...

Cross site request forgery (csrf)

Traq 3.7.1 allows admin/users/new CSRF to create an admin account aka groupid=1...

CVE-2018-20780

The CVE-2018-20780 entry concerns Traq 3.7.1, where a cross-site request forgery allows an attacker to trigger creation of an admin account (group_id=1). The vulnerability is CSRF in the web application, enabling unauthorized admin account creation without requiring user interaction beyond a craf...