Lucene search
+L

168 matches found

NVD
NVD
•added 2025/10/14 5:16 p.m.•23 views

CVE-2025-60535

A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...

7.3CVSS0.00153EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/14 12:00 a.m.•30 views

CVE-2025-60535

A Cross-Site Request Forgery (CSRF) vulnerability exists in Wallos v4.1.1 , specifically within the /endpoints/currency/currency component. This flaw allows an attacker to execute arbitrary operations by sending a crafted GET request . While the vulnerability is confirmed across multiple sources,...

7.3CVSS6.9AI score0.00153EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•4 views

CVE-2025-60535: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...

7.3CVSS6.2AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/14 12:00 a.m.•22 views

CVE-2025-60535

A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...

0.00153EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/14 12:00 a.m.•5 views

CVE-2025-60535

A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...

6.9AI score0.00153EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-11328

Malware in sbrugna...

5.8CVSS5.5AI score0.00851EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-1381

Malware in sbrugna...

8.1CVSS8.1AI score0.01442EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-3535

Malware in sbrugna...

6CVSS6.4AI score0.01027EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-15573

Malware in sbrugna...

9.8CVSS8.1AI score0.02123EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-33855

Malicious code in bioql PyPI...

7CVSS5.3AI score0.00215EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2021-28325

Malicious code in bioql PyPI...

8.8CVSS8.8AI score0.00429EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-29834

Malicious code in bioql PyPI...

8.8CVSS5.7AI score0.00361EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-7688

Malicious code in bioql PyPI...

6.8CVSS6.6AI score0.00259EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-7685

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00224EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-7818

Malicious code in bioql PyPI...

8CVSS6.6AI score0.00218EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:58 a.m.•20 views

CVE-2024-33377

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page...

8.1CVSS7.4AI score0.00442EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 4:40 a.m.•28 views

CVE-2025-25928

A Cross-Site Request Forgery CSRF in the component /admin/users/user.form of Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted request. In this case, an attacker could elevate a low-privileged account to an administrative role by leveraging the CSRF...

8CVSS8.1AI score0.00281EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 4:39 a.m.•27 views

CVE-2025-25927

A Cross-Site Request Forgery CSRF in Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted GET request...

6.8CVSS7.5AI score0.00259EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 2:15 a.m.•20 views

CVE-2025-27910

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

8CVSS8AI score0.00218EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/11 8:15 p.m.•17 views

CVE-2025-25927

A Cross-Site Request Forgery CSRF in Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted GET request...

6.8CVSS6AI score0.00259EPSS
SaveExploits1References1
Rows per page
Query Builder