Rising Technosoft CAP back office application 授权问题漏洞

Rising Technosoft CAP back office application is a back office application from Rising Technosoft India. The Rising Technosoft CAP back office application suffers from an authorization issue vulnerability that stems from a weak password reset mechanism implemented in the API endpoint that allows ...

Rising Technosoft CAP back office application 安全漏洞

Rising Technosoft CAP back office application is a back office application from Rising Technosoft India. A security vulnerability exists in the Rising Technosoft CAP back office application that stems from improper authentication checks in the API endpoint, allowing an unauthenticated, remote...

CVE-2025-29995: Weak Password Recovery Mechanism for Forgotten Password

This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API endpoints. An authenticated remote attacker with a valid login ID could exploit this vulnerability through vulnerable API endpoint which could lead to account takeover of targete...

CVE-2025-29997: Incorrect Authorization

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API request URL to gain unauthorized access to other user accounts...

PT-2025-11165

Name of the Vulnerable Software and Affected Versions: CAP back office application affected versions not specified Description: The issue is caused by improper authorization checks on certain API endpoints, allowing an authenticated remote attacker to manipulate API request URLs and gain...

PT-2025-11164

Name of the Vulnerable Software and Affected Versions: CAP back office application affected versions not specified Description: The issue arises from the improper implementation of the OTP verification mechanism in the API-based login of the CAP back office application. A remote attacker with val...

PT-2025-11166

Name of the Vulnerable Software and Affected Versions: CAP back office application affected versions not specified Description: The issue is caused by missing rate limiting on OTP requests in an API endpoint, allowing an authenticated remote attacker to send multiple OTP requests, potentially...

PT-2025-11162

Name of the Vulnerable Software and Affected Versions: CAP back office application affected versions not specified Description: The issue is related to an improper authentication check at the "API endpoint". This could allow an unauthenticated remote attacker with a valid login ID to exploit the...

CVE-2025-29998: Improper Control of Interaction Frequency

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP...

CVE-2025-29996: Authentication Bypass Using an Alternate Path or Channel

This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanism in its API based login. A remote attacker with valid credentials could exploit this vulnerability by manipulating API request URL/payload. Successful exploitation of this...

PT-2025-11163

Name of the Vulnerable Software and Affected Versions: CAP back office application affected versions not specified Description: The issue is caused by a weak password-reset mechanism implemented at API endpoints in the CAP back office application. This allows an authenticated remote attacker with...

CVE-2025-29994: Weak Authentication

This vulnerability exists in the CAP back office application due to improper authentication check at the API endpoint. An unauthenticated remote attacker with a valid login ID could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to...

WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Back To Top versions = 2.0...

CVE-2025-28940

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

CVE-2025-28940 WordPress Back To Top Plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

CVE-2025-28940

CVE-2025-28940 refers to a CSRF vulnerability in the WordPress plugin Back To Top (

WordPress plugin Back To Top 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in...

PT-2025-10967

Name of the Vulnerable Software and Affected Versions: arkapravamajumder Back To Top versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0, update to a version that...

CVE-2025-28940: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in arkapravamajumder Back To Top backtotop allows Cross Site Request Forgery.This issue affects Back To Top: from n/a through = 2.0...

CVE-2025-1886

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials...