Lucene search
+L

39 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-0324

Malware in sbrugna...

8.1CVSS7.8AI score0.009EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-6534

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00351EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/05 3:44 p.m.12 views

CVE-2020-5257

In Administrate rubygem before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the direction parameter and bypass ActiveRecord...

8.1CVSS7.5AI score0.009EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.5 views

Malicious code in administrate_field-password (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.4 views

Malicious code in administrate_field-paperclip (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.8 views

Malicious code in administrate_field-mobility (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:47 p.m.10 views

MAL-2024-6514 Malicious code in administrate-field-belongs-to_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:47 p.m.5 views

Malicious code in administrate-field-belongs-to_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2022/08/06 12:0 a.m.18 views

GHSA-CC8C-26RJ-V2VX administrate vulnerable to Cross-Site Request Forgery

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.4CVSS5.5AI score0.00351EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/08/06 12:0 a.m.23 views

administrate vulnerable to Cross-Site Request Forgery

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.4CVSS6.4AI score0.00351EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/08/05 4:15 p.m.15 views

CVE-2016-3098

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.4CVSS0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/05 4:15 p.m.20 views

CVE-2016-3098

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.4CVSS5.7AI score
SaveExploits0References1
Prion
Prion
added 2022/08/05 4:15 p.m.14 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.8CVSS7.4AI score0.00351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/05 3:22 p.m.20 views

CVE-2016-3098

Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...

5.5AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/05 3:22 p.m.109 views

CVE-2016-3098

CVE-2016-3098 describes a Cross-site request forgery (CSRF) vulnerability in the Administrate Rails dashboard (versions 0.1.4 and earlier) that can allow remote attackers to hijack a user’s OAuth authorization code. The vulnerability is documented across multiple sources (including Red Hat, GHSA,...

5.4CVSS5.5AI score0.00351EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.8 views

PT-2022-7857 · Unknown · Administrate

Name of the Vulnerable Software and Affected Versions: administrate versions 0.1.4 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the user's OAuth authorization code. Recommendations: For versions 0.1.4 and earlier, update to a version that fixe...

5.4CVSS5.6AI score0.00351EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.8 views

administrate 跨站请求伪造漏洞

administrate is thoughtbot open source to create a flexible and powerful administrative dashboard in Rails framework . A cross-site request forgery vulnerability exists in administrate version 0.1.4 and earlier. A remote attacker could use this vulnerability to hijack a user's OAuth authorization...

5.4CVSS5.6AI score0.00351EPSS
SaveExploits0References2
Snyk
Snyk
added 2020/04/17 12:0 a.m.2 views

Malicious Package

Overview administratefield-password is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2020/04/17 12:0 a.m.1 views

Malicious Package

Overview administratefield-mobility is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2020/04/17 12:0 a.m.1 views

Malicious Package

Overview administrate-field-belongs-tosearch is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avo...

8CVSS6.9AI score
SaveExploits0References2
Rows per page
Query Builder