CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76960 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

EUVD-2026-72580

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76960

SAP S/4HANA Finance (Advanced Payment Management) is affected by a Cross-Site Request Forgery (CSRF) vulnerability caused by insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page; when an authenticated victim interacts with it, uninte...

EUVD-2026-72579

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...

CVE-2026-76959 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...

CVE-2026-76959

A Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA Finance (Advanced Payment Management) stems from insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page that, when interacted with by an authenticated victim, triggers un...

CVE-2026-76959 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...

PT-2026-86956

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

PT-2026-86954

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...

CVE-2024-32136

BWL Advanced FAQ Manager 2.0.3 - Inyección SQL post-autenticación Título del exploit: BWL Advanced FAQ Manager 2.0.3 - Inyección SQL post-autenticación Fecha: 14 abr 2024 Autor del exploit: Ivan Spiridonov xbz0n Enlace del software: https://codecanyon.net/item/bwl-advanced-faq-manager/5007135...

CVE-2018-16712

CVE-2018-16712 Código PoC para CVE-2018-16712. Puedes obtener más información en https://downwithup.github.io/CVEPosts.html Software vulnerable Descarga @: https://www.iobit.com/en/advancedsystemcarefree.php...

CVE-2023-30777

CVE-2023-30777 Proof of Concept PoC URL generator for a reflected XSS vulnerability in the Advanced Custom Fields WordPress plugin. PoC Generate by : Alucard0x1 Credit of Exploit : https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

CVE-2024-9796

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - Unauthenticated SQL Injection Description The PoC SQL injection will dump WordPress users and hashes. Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, it’s entirely your responsibility; I am not liable f...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms = 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integrationid Description The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets an...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso exclusivo para fines educativos y entornos autorizados. PoC funcional para la vulnerabilidad CVE-2022-47447, que afecta a un plugin de WordPress vulnerable, permitiendo un ataque de tipo Cross-Site Request Forgery CSRF contra usuarios autenticados...

CVE-2026-13297

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack...

CVE-2026-13297

IBM Verify Identity Access and IBM Security Verify Access contain an information disclosure vulnerability in the Advanced Access Control component. The flaw can be exploited over the network with low complexity, requires no prior authentication, and results in a high impact to confidentiality wit...

CVE-2026-13297 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack...