45936 matches found
CVE-2020-23586
CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028"which allows an unauthenticated, remote attacker to conduct a...
EUVD-2026-95311
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking anti-CSRF tokens. Attackers can lure authenticated users to crafted links targeting /account/protected/delAll,...
CVE-2026-78388
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
CVE-2026-78388 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
CVE-2026-78388
IBM Security Verify Access (v10.0 through 10.0.9.2) and IBM Verify Identity Access (v11.0 through 11.0.3) are vulnerable to a Cross-Site Request Forgery (CSRF) (CWE-352). This flaw could allow an attacker to execute malicious and unauthorized actions by leveraging a user's trusted session with th...
EUVD-2026-95271
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...
Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4
SCOPIA XT Desktop 버전 8.3.915.4에서 CSRF 악용 이 PoC는 SCOPIA XT Desktop 버전 8.3.915.4에서 Cross-Site Request ForgeryCSRF를 탐색하는 방법을 설명합니다. SCOPIA 정보 웹사이트: https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 CSRFCross-Site Request Forgery 정보 사이트 간 요청 위조Cross-site request forgery는 원클릭 공격one-click...
CVE-2021-31762
CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...
Atmail-exploit-toolchain
AtMail Email Server Appliance 6.4 - エクスプロイトツールチェーン XSS CSRF RCE PacketStorm WLB-2020080010 免責事項: このエクスプロイトツールチェーンは EDB-ID 20009 に触発されたものです。 目的 このエクスプロイトツールチェーンの目的は、EDB-ID 20009 を置き換えることです。 このツールチェーンが EDB-ID 20009 エクスプロイトよりも優れている点: 使い方が簡単 再利用可能 動的に生成されるペイロード 簡単に編集・改造可能 明確なコードと利用可能なプラグイン EDB-ID 200...
CVE-2020-23587
CVE-2020-23587 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a...
CVE-2025-31033
⚠️ CVE-2025-31033 - WordPress Buddypress Humanity 플러그인 CSRF 취약점 버전 Exploit – CVE-2025-31033...
SuiteCRM-RCE
CVE-2020-28328 SuiteCRM Remote Code Execution via Log File System Setting and Log File Poisioning Overview I recently discovered two vulnerabilities in SuiteCRM that provides an attack chain for a low privileged user to achieve code execution on the underlying operating system. The attack chain i...
CVE-2024-34958
CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...
CVE-2025-39601
🚨 CVE-2025-39601 - WordPress Custom CSS, JS & PHP 플러그인 WordPress Custom CSS, JS & PHP plugin CSRF PoC - WordPress Custom CSS, JS & PHP plugin By : Nxploited | Khaled Alenazi input type="hidden" name="algcustomcssphp" value="?php system$G...
CVE-2026-62142
Cross-Site Request Forgery CSRF vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0...
CVE-2026-106611
Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...
CVE-2026-106611
The WPMU DEV Forminator plugin (versions n/a through 1.57.3 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability is associated with CWE-352 and has a High base sever...
EUVD-2026-94955
Cross-Site Request Forgery CSRF vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3...
ConceptronicIPCam_MultipleVulnerabilities
Multiple vulnerabilities at Conceptronic IP Cameras with 0.61.X. web firmware. A CSRF and Denial of Service vulnerabilities have been found at Conceptronic IP Cameras. CVE| Description ---|--- CVE-2018-6407| Unauthenticated remote Denial of Service vulnerability CVE-2018-6408| CSRF allows to chan...