CVE-2025-39601

🚨 CVE-2025-39601 - CSRF a RCE en el plugin Custom CSS, JS & PHP de WordPress = 2.4.1 🧠 Descripción Una vulnerabilidad de Cross-Site Request Forgery CSRF en el plugin WPFactory Custom CSS, JS & PHP permite la ejecución remota de código RCE mediante la inyección de código PHP malicioso a través de...

CVE-2025-31033

⚠️ CVE-2025-31033 - CSRF in WordPress Buddypress Humanity Plugin = 1.2 🛡️ Vulnerability Summary The Buddypress Humanity plugin for WordPress version = 1.2 is vulnerable to Cross-Site Request Forgery CSRF. This vulnerability allows an attacker to force a higher privileged user e.g., admin to...

CVE-2024-52402

🚀 Exploit para CVE-2024-52402: Plugin WordPress Exclusive Content Password Protect -un -p 🛠️ Opciones...

CVE-2025-10377

Prueba de Concepto CVE-2025-10377 Cross-Site Request Forgery CSRF en el Panel del Sistema del Plugin Función sdtogglelogs Tipo de vulnerabilidad: Cross-Site Request Forgery CSRF Función afectada: sdtogglelogs CVSS v3.1: 4.3 Media Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N Nota: La puntuación...

CVE-2024-22939

objetivo:https://github.com/sunkaifei/FlyCms versión: v1.0 Se descubrió que FlyCms v1.0 contiene una Cross-Site Request Forgery CSRF a través del componente /system/article/categoryedit Poc root@kitploit: history.pushState'', '', '/' Éxito:...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 Vulnerabilità CSRF: Porta alla Creazione di Client Fittizi Project Name & Repo URL : https://phpgurukul.com/client-management-system-using-php-mysql/ Vulnerability Name : Cross-Site Request ForgeryCSRF Affected Version : V1.2 Introduzione Una vulnerabilità di Cross-Site Request...

CVE-2023-43147

CVE-2023-43147 Fornitore: PHPJabbers Homepage del fornitore: https://www.phpjabbers.com/ Link del software: https://www.phpjabbers.com/limo-booking-software Versione: 1.0 Testato su: Windows 10 Pro Impatto: Aggiunta di un utente attaccante con privilegi di amministratore CVE: La vulnerabilità Cro...

CVE-2021-32159

..| CSRFtoCommandInjection1 |.. Beschreibung : Ausnutzung eines Cross-Site-Request-Forgery CSRF-Angriffs, um eine Command Injection über die Upload- und Download-Funktion von Webmin zu erreichen Getestete Version : Webmin 1.973 neueste Version auf GitHub 07/03/2021 Angriffsart: Remote Auswirkung ...

CVE-2021-31760

..| CVE-2021-31760 |.. Descrizione : Sfruttare un attacco Cross-site request forgery CSRF per ottenere una Remote Command Execution RCE attraverso la funzione di processo in esecuzione di Webmin Versione testata : Webmin 1.973 ultima versione su GitHub 07/03/2021 Tipo di attacco: Remoto Impatto :...

CVE-2025-57310

CVE-2025-57310 Eine Cross-Site Request Forgery CSRF-Schwachstelle in Salmen2/Simple-Faucet-Script v1.07 über eine manipulierte POST-Anfrage an admin.php?p=ads&c=1, die es Angreifern ermöglicht, beliebigen Code auszuführen. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Basis-Score: 8.8 Ho...

CVE-2026-81733

WWBN AVideo through version 30.0 (and master up to commit 4cb576e) is affected by a cross-site request forgery (CSRF) vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint accepts customUrl, customMessage, and autoRedirect parameters via a GET request and only verifies that the ...

CVE-2026-81733 WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php

WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...

CVE-2019-17633

CVE-2019-17633 CSRF in Eclipse Che führt zu RCE Dieser Fehler erlaubt es einer entfernten Website, einen beliebigen Docker-Container auf Maschinen zu erstellen und zu starten, auf denen Che vor den Versionen 7.3.0 und 7.4.1 läuft, wenn ein Benutzer eine Webseite besucht. Schwachstelle Dies ist ei...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descrizione : Sfruttando un attacco Cross-site request forgery CSRF per creare un utente privilegiato attraverso la funzionalità di aggiunta utenti di Webmin, ottenendo poi una reverse shell tramite la funzionalità di processo in esecuzione di Webmin Versione...

CVE-2024-34958

CVE-2024-34957 idccms CSRF PoC CVE-2024-34958 idccms CSRF PoC...

ConceptronicIPCam_MultipleVulnerabilities

Multiple vulnerabilità nelle telecamere IP Conceptronic con firmware web 0.61.X. Sono state trovate vulnerabilità CSRF e Denial of Service nelle telecamere IP Conceptronic. CVE| Descrizione ---|--- CVE-2018-6407| Vulnerabilità di Denial of Service remoto non autenticato CVE-2018-6408| CSRF consen...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso esclusivo per scopi educativi e ambienti autorizzati. PoC funzionale per la vulnerabilità CVE-2022-47447, che colpisce un plugin WordPress vulnerabile, consentendo un attacco di tipo Cross-Site Request Forgery CSRF contro utenti autenticati. URL...

MAGMI - Cross-Site Request Forgery

MAGMI Magento Mass Importer is vulnerable to cross-site request forgery CSRF due to a lack of CSRF tokens. Remote code execution via phpcli command is also possible in the event that CSRF is leveraged against an existing admin session. id: CVE-2020-5776 info: name: MAGMI - Cross-Site Request...

DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution

DedeCMS 5.7SP2 is susceptible to cross-site request forgery with a corresponding impact of arbitrary code execution because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code. id: CVE-2018-7700 info: name: DedeCMS 5.7SP2 - Cross-Site...

CVE-2025-26206

🚨 CVE-2025-26206: Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0 Benvenuti nel repository ufficiale che documenta la scoperta e i dettagli della CVE-2025-26206 , una critica vulnerabilità di Cross-Site Request Forgery CSRF in Sell Done Storefront v.1.0. Scoperta da B. Sibhi , quest...