118 matches found
Cross-site Request Forgery (CSRF)
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the handling of JSON endpoints that process state-changing requests without verifying the origin or requiring an anti-CSRF token...
CVE-2023-45374
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams...
CVE-2021-28055
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user...
EUVD-2021-1286
Malware in sbrugna...
EUVD-2019-1740
Malware in sbrugna...
EUVD-2020-23292
Malware in sbrugna...
EUVD-2020-21319
Malware in sbrugna...
EUVD-2013-7222
Malware in sbrugna...
EUVD-2018-8652
Malware in sbrugna...
EUVD-2013-2567
Malware in sbrugna...
EUVD-2021-13948
Malware in sbrugna...
EUVD-2015-3691
Malware in sbrugna...
EUVD-2018-20516
Malware in sbrugna...
EUVD-2022-35622
Malicious code in bioql PyPI...
EUVD-2024-49601
Malicious code in bioql PyPI...
EUVD-2022-3975
Malicious code in bioql PyPI...
EUVD-2023-49666
Malicious code in bioql PyPI...
EUVD-2022-3711
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-8647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it wa...
CVE-2024-8647
An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled...