CVE-2024-13405: Cross-Site Request Forgery (CSRF)

The Apptivo Business Site CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation on the 'awpipdeny' page. This makes it possible for unauthenticated attackers to block IP addresses via a...

CVE-2017-8334

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking IP addresses using the web management interface. It seems that the device does not implement any cross-site scripting forgery protection...

CVE-2013-2178: Improper Input Validation

The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request...

PT-2013-3579

Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.10 Description The issue arises from improper validation of log messages in certain configuration files, allowing remote attackers to block arbitrary IP addresses by sending specific messages in a request...