1850 matches found
X (Formerly Twitter): URGENT : NICHE.co Account Take Over Vulnerability
Hello ! This is an urgent report that you should immediately take care of !! I found out an account take over vulnerability on your acquisition : niche.co Proof of concept code CSRF Attack Page: /get-started/complete s The authenticitytoken parameter is not properly validated by the end of the...
HooToo Tripmate HT-TM01 Cross Site Request Forgery
Exploit Title: HooToo Tripmate HT-TM01 Cross Site Request Forgery Date: 03Sep15 Exploit Author: Ken Smith Contact: https://twitter.com/P4tchw0rk Vendor Homepage: http://www.hootoo.com Version: HT-TM01, version 2.000.022 1. Description Various functions in the device's admin web portal are...
WordPress Private Only 3.5.1 CSRF / Cross Site Scripting Vulnerabilities
Exploit for php platform in category web applications Details ================ Software: Private Only Version: 3.5.1 Homepage: http://wordpress.org/plugins/private-only/ Advisory report:...
WordPress SQL injection vulnerability and provide the right analysis-vulnerability warning-the black bar safety net
2313258f75eee9e3bf398ed6d1f0bb17 Reading: 2 7 5 WordPress core functionalitySQL injectionvulnerability analysis Threat Response Fellow at the center for the Wordpress core functionalitySQL injectionvulnerabilities number of CVE-2 0 1 5-5 6 2 3 and CVE-2 0 1 5-2 2 1 3for a detailed analysis 0x00...
Cisco Prime Infrastructure Web Interface Cross-Site Request Forgery Vulnerability
A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...
SEC Consult SA-20150805-0 :: Websense Content Gateway Stack Buffer Overflow in handle_debug_network
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20150805-0 ======================================================================= title: Stack buffer overflow in handledebugnetwork product: Websense Triton Content Manager vulnerable version: 8.0.0...
Websense Triton Content Manager 8.0.0 Build 1165 Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Stack buffer overflow in handledebugnetwork product: Websense Triton Content Manager vulnerable version: 8.0.0 build 1165...
WordPress Google Plus One Button By KMS 1.5.0 CSRF / XSS
Title: WordPress 'Google 'Plus one' Button by kms' Plugin Version: 1.5.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/google-plus-one-button-by-kms/ - https://plugins.svn.wordpress.org/google-plus-one-button-by-kms/ Notified...
PT-2015-6493 · Cisco · Cisco Unified Intelligence Center
Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center versions 10.01 through 10.61 Description: A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For versions...
Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability
A vulnerability in the web framework of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit th...
ManageEngine EventLog Analyzer Cross Site Request Forgery
A cross site request forgery vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to insufficient input validation of parameters sent to event/userManagementForm.do. By convincing a user to follow a malicious link, a remote attacker can exploit this vulnerability to...
Resource Data Management Privilege Escalation Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified two vulnerabilities in Resource Data Management’s Data Manager application. Resource Data Management has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS Resourc...
CVE-2015-3191 - CSRF attack on change email | Cloud Foundry
CVE-2015-3191 – CSRF attack on change email Low Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v210 UAA versions prior to 2.3.0 Description The changeemail form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user...
ClickHeat 1.14 - Cross-Site Request Forgery (Change Admin Password)
ClickHeat 1.14 - Cross-Site Request Forgery Change Admin Password Exploit Title: ClickHeat input type="hidden" name="config" value="a:23:s:7:"logPath";s:31:"C:/xampp /htdocs/clickheat/logs/";s:9:"cachePath";s:32:"C:/xampp/htdocs/clickheat...
Legal Robot: CSRF
Security researcher identified a logout CSRF attack, which was later patched...
Comodo GeekBuddy Local Privilege Escalation
Comodo GeekBuddy Local Privilege Escalation CVE-2014-7872 Jeremy Brown jbrown3264/gmail -Synopsis- Comodo GeekBuddy, which is bundled with Comodo Anti-Virus, Comodo Firewall and Comodo Internet Security, runs a passwordless, background VNC server and listens for incoming connections. This can all...
Embed Articles <= 7.0.3 - CSRF & Stored XSS
This plugin has since been discontinued...
thunderbird security update
CentOS Errata and Security Advisory CESA-2015:0771 An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via a request to profiles-update/...