Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF in the render function used by the My Account widget. An attacker can perform administrative actions, execute arbitrary code, and alter user settings by convincing a user to follow a link including a...

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0...

CVE-2024-49617 WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

CVE-2024-49617 WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0...

CVE-2024-49617

CVE-2024-49617 affects the WordPress Back Link Tracker plugin (versions

PT-2024-33572 · Unknown · Bhaskar Dhote Back Link Tracker

Name of the Vulnerable Software and Affected Versions: Bhaskar Dhote Back Link Tracker versions n/a through 1.0.0 Description: The issue affects Bhaskar Dhote Back Link Tracker, allowing Blind SQL Injection via a Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to inject...

WordPress plugin Back Link Tracker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Back Link Tracker plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

CSRF to SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Back Link Tracker versions = 1.0.0...

WordPress Back Link Tracker Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Back Link Tracker Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-49617 Patch priority Low CVSS severity Low 8.2 Developer Claim ownership PSID 86650c4bbaea Credits João Pedro S Alcântara Kinorth...

soc: qcom: cmd-db: Map shared memory as WC not WB

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper error path management in the write log function, resulting in the write-back flag and the...

CVE-2024-47657

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

CVE-2024-47657

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

CVE-2024-47657 Improper Access Control Vulnerability

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

CVE-2024-47657 Improper Access Control Vulnerability

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

CVE-2024-47657

Shilpi Net Back Office is affected by CVE-2024-47657 due to improper access controls on API endpoints. An authenticated remote attacker could manipulate the dfclientid parameter in API request URLs to gain unauthorized access to other users’ sensitive information. Connected documents confirm this...

PT-2024-32716 · Unknown · Shilpi Net Back Office

Name of the Vulnerable Software and Affected Versions: Shilpi Net Back Office affected versions not specified Description: This issue exists due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this by manipulating the dfclientid parameter throu...

Shilpi Net Back Office 安全漏洞

Shilpi Net Back Office is a back office system for the Shilpi system. A security vulnerability exists in Shilpi Net Back Office versions prior to 5.5.002, which stems from improper access control of API endpoints and could lead to unauthorized access to sensitive information belonging to other...

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...