Outlook Web Access 2007 CSRF Vulnerability

No description provided by source. Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporate webmails. And wh...

Edimax AR-7084GA Router CSRF + Persistent XSS Exploit

No description provided by source. ?php / Edimax AR-7084GA Router CSRF + Persistent XSS Exploit Firmware version: 2.9.8.1RUE0.C2A3.7.6.1 Vulnerable page: http://xx.xx.xx.xx/advanced/advnatvirsvr.htm Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co....

Simple Machines forum (SMF) 2.0 session hijacking

No description provided by source. Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf attacks sending a...

Uzbey: Flash Content-Type Sniffing Vulnerability

Hello, There's a Flash Content-Type Sniffing vulnerability. Using this vulnerability I can read the client side source code of your website from a different origin say prakharprasad.com and then look for potentially sensitive data in those pages for example - CSRF prevention tokens and then...

WePay: Typical form vulnerable to csrf attack

See the form you give here. This is provided by you to change settings without logging in. You have supplied a 'csrf token' and 'ounce'. eg. https://stage.wepay.com/email/manage/170395/hash But, i bypassed your csrf by just removing values of tokens and submitting it blank. And it worked. Hope, y...

HackerOne: Spamming any user from Reset Password Function

It is possible to spam any user whose email-id is known. This can be combined with csrf attack i.e automated to send 50 emails with a click. This is reset password form --- Forgot password To retrieve your password enter the email address you used to sign up. Here, authencity token can be used mo...

NETGEAR DGN2200 1.0.0.29_1.7.29_HotS - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: CSRF in NETGEAR DGN2200 Admin panel Date 02/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://netgear.com Affected Firmware version: 1.0.0.291.7.29HotS Affected Hardware: NETGEAR DGN2200 Wireless ADSL...

Coinbase: CSRF on "Set as primary" option on the accounts page

On navigating to the Accounts page, a Coinbase user can create multiple accounts. The user can then make any of these accounts as their primary account. There are also other options of renaming and deleting these accounts. Although there is a CSRF token being sent as a POST parameter for the dele...

Localize: CSRF in adding phrase.

CSRF is an attack which forces an end user to execute unwanted actions on a web application in which he/she is currently authenticated. With a little help of social engineering like sending a link via email/chat, an attacker may trick the users of a web application into executing actions of the...

Secret: Login CSRF in Secret.ly

https://www.secret.ly//login POST //login HTTP/1.1 Host: www.secret.ly User-Agent: Mozilla/5.0 Windows NT 6.1; rv:28.0 Gecko/20100101 Firefox/28.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/json;...

IRCCloud: Session Token is not Verified while changing Account Setting's which Result In account Takeover

Hello IrcCloud Security Team, Vulnerability Detail's:- Session Token is not Verified while changing Account Setting's which Result In account Takeover Description:- I have found that while changing Setting Session token is not verified .So an attacker can basically plot a CSRF attack which would...

Wordpress XCloner Plugin 3.1.0 - CSRF Vulnerability

Exploit for php platform in category web applications Product: XCloner Wordpress plugin Vendor: XCloner Vulnerable Versions: 3.1.0 and probably prior Tested Version: 3.1.0 Advisory Publication: March 12, 2014 without technical details Vendor Notification: March 12, 2014 Vendor Patch: March 13, 20...

[CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue

Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...

Discuz! X2.5 / X3 / X3.1 可CSRF删管理员账号

简要描述： 接着上次的漏洞来…… 详细说明： 上次那个漏洞： WooYun: Discuz! X2.5 / X3 / X3.1中CSRF攻击防御可被绕过 你们回复说是程序员认为不需要校验才这么设置……那这回应该算是你设计问题了吧 后台删除用户页面只是单纯做了submitcheck'submit', 1，按之前的说明，程序这里没有判断formhash，也就是说可以用于CSRF 不过利用这个漏洞前提是要管理员登陆了后台，不过这个不会很麻烦吧（比如故意加点关键字进审核然后让管理员触发神马的，实在不行还能发帖钓鱼） 漏洞证明： 发帖插入 Discuz! 代码：...

Cross site request forgery (csrf)

Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed...

Cross site request forgery (csrf)

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed...

CVE-2013-6166

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed...

CVE-2013-6166

CVE-2013-6166 affects Google Chrome pre-29. The issue arises when Chrome sends HTTP Cookie headers without validating that cookies meet character-set restrictions, enabling a remote attacker to trigger a persistent Logout CSRF-like effect by crafting a parameter that causes a web app to set a mal...

CVE-2013-6167

Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed...

Facebook Fixes CSRF Vulnerability in Instagram

Until last week, some parts of the API that Instagram uses were vulnerable to a cross-site request forgery CSRF attack, something that could have put photos users thought were private, out in the open. It took almost six months but Facebook, the photo sharing application’s parent company, patched...