45116 matches found
CVE-2026-95362
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95362
A Cross-site request forgery (CSRF) vulnerability exists in the DevTools component of Google Chrome prior to version 154.0.8037.57 . A remote attacker can leverage social engineering to bypass the web origin policy by tricking a user into visiting a crafted HTML page. This vulnerability could pot...
EUVD-2026-89255
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95362
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2020-23586
CVE-2020-23586 OPTILINK E-PON "型号：OP-XT71000N"，"硬件版本：V2.2"；及"固件版本：OPV3.3.1-191028" 在 "OPTILINK OP-XT71000N 硬件版本：V2.2，固件版本：OPV3.3.1-191028" 中发现了一个漏洞，允许未经认证的远程攻击者通过跨站请求伪造（CSRF）攻击添加网络流量控制类型规则。 目标 /netqosclsedit.asp 攻击向量 netqosclsedit.asp 允许添加网络流量控制类型规则，但缺乏足够的 CSRF 防护措施。 致谢 Huzaifa Hussain...
cve-2016-4845_csrf
cve-2016-4845csrf 针对IO-DATA记录硬盘驱动器的CSRF漏洞CVE-2016-4825的概念验证。 许可证 这些代码根据MIT许可证发布。请参阅LICENSE.txt。...
CVE-2020-23587
CVE-2020-23587 OPTILINK E-PON "MODELO NO: OP-XT71000N" con "VERSIÓN DE HARDWARE: V2.2" y "VERSIÓN DE FIRMWARE: OPV3.3.1-191028" Una vulnerabilidad encontrada en "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" permite que un atacante remoto no autenticado realice ...
CVE-2026-41875
Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...
CVE-2019-17633
CVE-2019-17633 Eclipse Che CSRF que conduce a RCE Este error permite que un sitio web remoto cree e inicie un contenedor Docker arbitrario en máquinas que ejecuten Che antes de las versiones 7.3.0 y 7.4.1 cuando un usuario visita una página web. Vulnerabilidad Se trata de un error de CSRF que...
CVE-2026-41875 Cross-Site Request Forgery in admin panel of Quick.Cart
Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...
CVE-2026-41875
The Quick.Cart software contains a Cross-Site Request Forgery (CSRF) vulnerability within the admin config panel . An attacker can craft a malicious website that, when visited by an administrator, automatically sends a POST request to modify the administrator's login credentials and password. Whi...
EUVD-2026-88741
Quick.Cart is vulnerable to Cross-Site Request Forgery in admin config panel. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request that changes admin's login and password. This software does implement simple protection against this...
CVE-2021-31762
CSRF-to-RCE ..| CVE-2021-31762 |.. 描述： 利用跨站请求伪造（CSRF）攻击，通过Webmin的添加用户功能创建特权用户，然后通过Webmin的运行进程功能获取反弹Shell 测试版本： Webmin 1.973（GitHub最新版本 2021/03/07） 攻击类型： 远程 影响： 远程命令执行 漏洞利用POC代码： YouTube POC： https://youtu.be/qCvEXwyaF5U 产品供应商： https://www.webmin.com 附加信息：...
CVE-2024-22939
objetivo:https://github.com/sunkaifei/FlyCms versión: v1.0 Se descubrió que FlyCms v1.0 contiene una Cross-Site Request Forgery CSRF a través del componente /system/article/categoryedit Poc history.pushState'', '', '/' Éxito:...
CVE-2025-22963
Descripción general Vulnerabilidad de falsificación de petición en sitios cruzados CSRF en versiones de Teedy = v1.11 permite a atacantes remotos forzar a un usuario final a cambiar su información de usuario nombre de usuario, contraseña, etc... en la aplicación web en la que está autenticado...
ConceptronicIPCam_MultipleVulnerabilities
Conceptronic IP摄像头 0.61.X Web固件的多个漏洞 在Conceptronic IP摄像头中发现了CSRF和拒绝服务漏洞。 CVE| 描述 ---|--- CVE-2018-6407| 未认证的远程拒绝服务漏洞 CVE-2018-6408| CSRF允许更改管理员用户凭据或创建新用户 0. 引言...
MAGMI - Cross-Site Request Forgery
MAGMI Magento Mass Importer is vulnerable to cross-site request forgery CSRF due to a lack of CSRF tokens. Remote code execution via phpcli command is also possible in the event that CSRF is leveraged against an existing admin session. id: CVE-2020-5776 info: name: MAGMI - Cross-Site Request...
EUVD-2026-88561
Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...
CVE-2026-67993
The basecamp/upright software (at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f) contains a login cross-site request forgery (CSRF) issue within the static credentials callback . The vulnerability specifically involves the session handling logic in the sessions_controller.rb file. No informatio...