WordPress Cross-site Fraud

The vulnerability of the WordPress website content management system is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

Squid append_domain Manipulation Confidential Data

The vulnerability of the appenddomain parameter in the Squid proxy server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

Cisco IOS XE Cross-site Fraudulently Crafted Requests

The vulnerability in the web interface for controlling the Cisco IOS XE operating system is related to the lack of authentication for the requests being sent. Exploiting this vulnerability allows a malicious actor to perform cross-site fraudulently by using a specially crafted link to send...

Cisco Energy Management Suite Cross Site Fraudulently

The vulnerability of the Cisco Energy Management Suite’s web interface relates to the lack of authentication for HTTP requests. Exploiting this vulnerability allows a remote attacker to perform cross-site fraudulently, and to carry out arbitrary actions on the vulnerable device under the user’s...

FortiOS Web Interface Cross Site Fraudulently

The vulnerability in the FortiOS operating system’s web interface is related to the lack of checks for the authenticity of HTTP requests. Exploiting this vulnerability allows a malicious actor to perform cross-site fraudulently...