Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 25.10.2, prior to 24.10.15, and prior to...

EUVD-2021-12790

Malware in sbrugna...

CVE-2021-25924

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

Cross site request forgery (csrf)

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

CVE-2021-25924

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

CVE-2021-25924: Cross-Site Request Forgery (CSRF)

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

PT-2021-16854

Name of the Vulnerable Software and Affected Versions GoCD versions 19.6.0 through 21.1.0 Description The issue is related to Cross-Site Request Forgery CSRF due to missing protection at the "/go/api/config/backup" endpoint. An attacker can trick a victim into clicking on a malicious link,...

PT-2019-4086

Name of the Vulnerable Software and Affected Versions FortiMail versions 5.4.10 and below FortiMail versions 6.0.0 through 6.0.6 FortiMail version 6.2.0 Description The issue is related to improper access control in the FortiMail admin webUI, which may allow a remote attacker to bypass existing...

The vulnerability of the page handler /api/cmdb web interface of the FortiOS operating system allows attackers to execute cross-site scripting attacks.

The vulnerability of the page handler /api/cmdb web interface of the FortiOS operating system is related to errors during HTTP request filtering. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks using specially crafted POST requests sent to the /api/cmdb page...