EUVD-2025-14818

Malicious code in bioql PyPI...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...

CVE-2025-29722

CVE-2025-29722 is a CSRF vulnerability in Commercify v1.0 due to missing CSRF protection on sensitive endpoints. The root cause is lack of CSRF tokens with permissive cookies/CORS, enabling attackers to perform unauthorized actions on behalf of authenticated users (example: settings changes via e...

PT-2025-17215 · Unknown · Commercify

Name of the Vulnerable Software and Affected Versions: Commercify version 1.0 Description: A CSRF issue allows remote attackers to perform unauthorized actions on behalf of authenticated users due to missing CSRF protection on sensitive endpoints. Recommendations: For Commercify version 1.0,...

Commercify 安全漏洞

Commercify is an e-commerce website by the individual developer Yash Mittal. A security vulnerability exists in version 1.0 of Commercify, which stems from a lack of CSRF protection on sensitive endpoints and could lead to cross-site request forgery attacks...

CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints...