4 matches found
Exploit for CVE-2024-37791
CVE-2024-37791 CVE-2024-37791 项目地址: 准备工作: 登入后台-获取co...
PT-2024-13465 · Decidim · Decidim
Name of the Vulnerable Software and Affected Versions: Decidim versions 0.23.0 through 0.27.4 Decidim versions 0.28.0 before the fix Description: Decidim is a participatory democracy framework. The CSRF authenticity token check is disabled for the questionnaire templates preview, which may allow...
CVE-2023-47635: Server-Side Request Forgery (SSRF)
Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as you need to have access also to the...
PT-2017-13767 · Intelbras · Intelbras Wrn 150
Name of the Vulnerable Software and Affected Versions: Intelbras WRN 150 devices affected versions not specified Description: The issue allows remote attackers to read the configuration file and bypass authentication by making a direct request for "cgi-bin/DownloadCfg/RouterCfm.cfg" with an...