6706 matches found
CVE-2013-5730
Multiple cross-site request forgery CSRF vulnerabilities in D-Link DSL-2740B Gateway with firmware EU1.00 allow remote attackers to hijack the authentication of administrators for requests that 1 enable or disable Wireless MAC Address Filters via a wlFltMode action to wlmacflt.cmd, 2 enable or...
CVE-2013-6797
Cross-site request forgery CSRF vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bwurl parameter in the bw-videos pag...
CVE-2013-6797
CVE-2013-6797 is a CSRF vulnerability in the WordPress plugin Blue Wrench Video Widget (bluewrench-video-widget.php) prior to version 2.0.0 . The issue allows remote attackers to hijack an administrator’s session by crafting requests that embed arbitrary URLs via the bw_url parameter on the bw-vi...
Fortianalyzer VM / Appliance 5.0.4 Cross Site Request Forgery
CertR no respond my email, not Fortinet has not given the credits. I. VULNERABILITY ------------------------- CSRF vulnerabilities in OS of fortianalyzer 5.0.4 II. BACKGROUND ------------------------- Fortinets industry-leading, Network Security Platforms deliver Next Generation Firewall NGFW...
CTF365 Capture The Flag - The Next Generation IT Security Training Platform
For years, the Capture the Flag platform has been a common and very popular part of the hacker convention scene. Teams come from all over the world to show their skill and technique in various competitions. The CTF365 team took that interest, passion and excitement and went to a new level in thei...
CTF365 Capture The Flag - The Next Generation IT Security Training Platform
For years, the Capture the Flag platform has been a common and very popular part of the hacker convention scene. Teams come from all over the world to show their skill and technique in various competitions. The CTF365 team took that interest, passion and excitement and went to a new level in thei...
CVE-2013-6366
The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...
CVE-2013-6366
The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime.exec call...
Design/Logic Flaw
Xen before 4.1.x, 4.2.x, and 4.3.x does not take the pagealloclock and granttable.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service host deadlock via unspecified vectors...
CVE-2013-4494
Xen before 4.1.x, 4.2.x, and 4.3.x does not take the pagealloclock and granttable.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service host deadlock via unspecified vectors...
CVE-2013-5977
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
CVE-2013-2701
The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...
CVE-2013-5977
Cross-site request forgery CSRF vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that 1 create or modify products or conduct cross-site scripting XSS attacks via the 2...
interface: Ruby code injection
The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors...
Cisco Releases Security Advisory
Cisco has released a security advisory to address multiple vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR. These vulnerabilities, which are independent of each other, could allow an unauthenticated remote attacker to cause a denial-of-service condition...
CVE-2013-6027
Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/toolsmisc.xgi...
PT-2013-5932 · D Link · D-Link Dir-100
Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 routers affected versions not specified Description: A stack-based buffer overflow issue exists in the RuntimeDiagnosticPing function, located in /bin/webs on D-Link DIR-100 routers. This could potentially allow remote...
CVE-2013-4689
J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before 12.3R2, and 13.1 before 13.1R3 allow remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hija...
[Mutator v0.2.2.1] Wordlist mutator
This project aims to be a wordlist mutator with hormones, which means that some mutations will be applied to the result of the ones that have been already done, resulting in something like: corporation - C0rp0r4t10n2012 This software is usefull when applied to a few words, like company name and/o...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 modify user privileges or 2 conduct cross-site scripting XSS attacks via...