148 matches found
CVE-2025-26206
🚨 CVE-2025-26206: Sell Done Storefront v.1.0 におけるクロスサイトリクエストフォージェリ CSRF CVE-2025-26206 （Sell Done Storefront v.1.0 における重要なクロスサイトリクエストフォージェリ CSRF 脆弱性）の発見と詳細を記録した公式リポジトリへようこそ。この脆弱性は B. Sibhi によって発見され、堅牢なWebアプリケーションセキュリティの実践の重要性を示しています。 📄 概要 このリポジトリは、Sell Done Storefront v.1.0 で特定された CSRF脆弱性 （CVE ID...
CVE-2018-25334: Cross-Site Request Forgery (CSRF)
Zechat 1.5 contains a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but an attacker can use the hashtag parameter to inject an encoded payload and bypass the CSRF...
CVE-2022-23680
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...
CVE-2022-23679
AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context of another user in ArubaOS-CX Switches versions: AOS-CX 10.10.xxxx: 10.10.0002 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX...
CVE-2021-41273
Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Due to improperly configured CSRF protections on two routes, a malicious user could execute a CSRF-based attack against the following endpoints: Sending a test email and Generating a node auto-deployment...
CVE-2019-16763
In Pannellum from 2.5.0 through 2.5.4 URLs were not sanitized for data URIs or vbscript:, allowing for potential XSS attacks. Such an attack would require a user to click on a hot spot to execute and would require an attacker-provided configuration. The most plausible potential attack would be if...
CVE-2025-65962
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 are mission CSRF protections in its tracker field dependencies,...
CVE-2025-64760
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterprise Edition prior to 17.0-3 and 16.13-8 have missing CSRF protections which allow attackers to create or remove track...
CVE-2025-65962 Tuleap has missing CSRF protections its in tracker field dependencies
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 are mission CSRF protections in its tracker field dependencies,...
CVE-2025-65962 Tuleap has missing CSRF protections its in tracker field dependencies
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 are mission CSRF protections in its tracker field dependencies,...
CVE-2025-64760
Tuleap has a CSRF protection vulnerability in the tracker trigger management functionality. Affected products are Tuleap Community Edition older than 17.0.99.1763126988 and Tuleap Enterprise Edition older than 17.0-3 and 16.13-8. The issue allows attackers to create or remove tracker triggers due...
CVE-2023-53688
Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS and cross-site request forgery CSRF via the Hypermap Replay component. An attacker can submit crafted input that is not properly validated or escaped, allowing injection of malicious script that executes in the context ...
EUVD-2017-16646
Malware in sbrugna...
EUVD-2017-16640
Malware in sbrugna...
EUVD-2020-29150
Malware in sbrugna...
EUVD-2018-1033
Malware in sbrugna...
EUVD-2018-17308
Malware in sbrugna...
EUVD-2020-27054
Malware in sbrugna...