Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

MAGMI - Cross-Site Request Forgery

MAGMI Magento Mass Importer is vulnerable to cross-site request forgery CSRF due to a lack of CSRF tokens. Remote code execution via phpcli command is also possible in the event that CSRF is leveraged against an existing admin session. id: CVE-2020-5776 info: name: MAGMI - Cross-Site Request...

CVE-2026-111753

The @angular/common package's HttpClient function xsrfInterceptorFn is vulnerable to XSRF token leakage due to a URL parsing discrepancy between a regular expression and the browser's WHATWG URL parser . Because the regex does not normalize certain characters—such as backslashes, control characte...

CVE-2026-122151

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122144

A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the publi...

CVE-2026-122151 Presenton User Configuration user-config JSON.parse cross-site request forgery

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

EUVD-2026-117203

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122151 Presenton User Configuration user-config JSON.parse cross-site request forgery

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

CVE-2026-122151

A security vulnerability exists in Presenton versions up to 0.9.11-beta within the User Configuration Handler component. Specifically, the JSON.parse function in the /api/user-config file is susceptible to manipulation, which can lead to cross-site request forgery (CSRF) . This attack can be laun...

CVE-2026-122144

A security flaw exists in nliautaud pico-content-editor (up to commit 02d5ad6c820c5050c542ab9505819b5e0a0ba1af) that enables a cross-site request forgery (CSRF) attack. The vulnerability is exploitable remotely and affects products no longer supported by the maintainer. While the underlying code ...

CVE-2026-122144 nliautaud pico-content-editor cross-site request forgery

A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the publi...

EUVD-2026-117200

A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the publi...

PT-2026-137247

A security vulnerability has been detected in Presenton up to 0.9.11-beta. Impacted is the function JSON.parse of the file /api/user-config of the component User Configuration Handler. Such manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit...

PT-2026-137245

A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the publi...

CVE-2026-92704

The SharpEmu experimental PlayStation 5 emulator for Windows and Linux is vulnerable to a cross-site request forgery (CSRF) in its repository-provided debugger frontend (version 0.0.3-release.3 and earlier). The frontend exposes an HTTP API on 127.0.0.1:8765 that lacks authentication, CSRF tokens...

CVE-2026-92704 SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution

SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the repository-provided debugger frontend tooling is vulnerable while running. This tooling is not included in the release archives. The frontend exposes an HTTP API on 127.0.0.1:8765...

Prestashop-CVE-2024-34716

Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...

EUVD-2026-116582

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...

PT-2026-136999

SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. In version 0.0.3-release.3 and earlier, the repository-provided debugger frontend tooling is vulnerable while running. This tooling is not included in the release archives. The frontend exposes an HTTP API on 127.0.0.1:8765...

CVE-2026-110288

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...