177 matches found
EUVD-2026-31361
Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the DeleteFile controller. The code throws an error when the token IS valid and proceeds with file deletion when the token is invalid or missing. This effectively disables CSRF protecti...
CVE-2026-7882 Concrete CMS 9.5.0 and below is vulnerable to CSRF via the DeleteFile controller
Concrete CMS 9.5.0 and below is vulnerable to unauthorized file deletion due to an Inverted CSRF token check in the DeleteFile controller. The code throws an error when the token IS valid and proceeds with file deletion when the token is invalid or missing. This effectively disables CSRF protecti...
owasp-web-pentest-tools
OWASP Web Pentest Tools CLI toolkit para suporte em testes de...
CVE-2022-0875
The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and perform Cross-Site Scripting attacks...
CVE-2022-0345
The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfwsearchusers AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes finding the first letter, then the second one, then the third one...
CVE-2025-12696
CVE-2025-12696 affects the WordPress HelloLeads CRM Form Shortcode plugin (versions
EUVD-2021-11984
Malware in sbrugna...
EUVD-2021-11730
Malware in sbrugna...
EUVD-2021-11471
Malware in sbrugna...
EUVD-2021-11358
Malware in sbrugna...
EUVD-2021-11922
Malware in sbrugna...
EUVD-2021-11496
Malware in sbrugna...
EUVD-2021-11925
Malware in sbrugna...
EUVD-2021-11399
Malware in sbrugna...
EUVD-2021-11901
Malware in sbrugna...
EUVD-2021-11751
Malware in sbrugna...
EUVD-2021-11637
Malware in sbrugna...
EUVD-2021-11824
Malware in sbrugna...
EUVD-2021-11262
Malware in sbrugna...
EUVD-2021-11498
Malware in sbrugna...