Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin = 0.3.2 versions...

CVE-2023-27435

The CVE-2023-27435 entry concerns the WordPress HTTP Auth Plugin, vulnerable in versions 0.3.2, with patch 1.0.0 indicated as the fix. Exploitability details in the connected docs show unauthenticated access as a consideration; exploitation status is not definitively provided beyond the CSRF cla...

CVE-2023-27435 WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin = 0.3.2 versions...

CVE-2023-27435 WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin = 0.3.2 versions...

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.

...

PT-2023-27497 · Broadpeak · Broadpeak Centralized Accounts Management Auth Agent

Name of the Vulnerable Software and Affected Versions: Broadpeak Centralized Accounts Management Auth Agent versions 00.12.01.9565588 1254b459, 01.01.00.19219575 ee9195b0, 01.01.01.30097902 fd999e76 Description: A cross-site scripting XSS issue in the bpk-common/auth/login/index.html login portal...

Broadpeak Centralized Accounts Management Auth Agent Cross-Site Scripting Vulnerability

Broadpeak Centralized Accounts Management Auth Agent is a centralized accounts management authentication agent application from Broadpeak France. A cross-site scripting vulnerability exists in Broadpeak Centralized Accounts Management Auth Agent versions 01.01.00.19219575ee9195b0,...

PT-2023-21124 · Unknown · Sami Ahmed Siddiqui Http Auth Plugin

Name of the Vulnerable Software and Affected Versions: Sami Ahmed Siddiqui HTTP Auth plugin versions 0.3.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

LDAP Login Scanner

This module attempts to login to the LDAP service. Module Options msf use auxiliary/scanner/ldap/ldaplogin msf auxiliaryldaplogin show actions ...actions... msf auxiliaryldaplogin set ACTION msf auxiliaryldaplogin show options ...show and set options... msf auxiliaryldaplogin run This module...

CVE-2023-44266 WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jewel Theme WP Adminify plugin = 3.1.6 versions...

CVE-2023-44230

CVE-2023-44230 describes a Stored XSS vulnerability in the WordPress plugin “Popup contact form” by Gopi Ramasamy, affecting versions

CVE-2023-44265

CVE-2023-44265 affects the WordPress plugin Popup contact form by Gopi Ramasamy, affected versions

CVE-2023-44242

CVE-2023-44242 affects 2J Slideshow Team Slideshow, Image Slider by 2J plugin (WordPress) version 1.3.54 to mitigate the vulnerability. No other products or exploitation details are provided in the documents.

CVE-2023-44145

The CVE-2023-44145 entry concerns the WordPress plugin Anchor Episodes Index (Spotify for Podcasters) by jesweb.Dev. A Stored Cross-Site Scripting (XSS) vulnerability affects versions ≤ 2.1.7, exploitable by an authenticated user with admin+ privileges. The issue arises in how the plugin handles ...

CVE-2023-44263

CVE-2023-44263 affects the WordPress plugin Riyaz Social Metrics (versions &lt;= 2.2). It is a Stored Cross-Site Scripting (XSS) vulnerability that requires admin+ authentication to exploit. The NVD entry lists a base CVSS v3.1 score of 4.8 (Medium), while PatchStack describes the vulnerability w...

CVE-2023-41855

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Regpacks Regpack plugin = 0.1 versions...

CVE-2023-41859

CVE-2023-41859 is a stored XSS affecting the WordPress plugin Order Delivery Date for WP e-Commerce, versions

CVE-2023-41847

CVE-2023-41847 affects the WordPress plugin Notice Bar (WEN Solutions) with versions

CVE-2023-41800

CVE-2023-41800: A stored XSS vulnerability in the UniConsent CMP WordPress plugin (UniConsent CMP for GDPR CPRA GPP TCF) affecting versions

CVE-2023-41797 WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Gold Plugins Locations plugin = 4.0 versions...