EUVD-2019-13478

Malware in sbrugna...

EUVD-2016-3147

Malware in sbrugna...

EUVD-2013-3451

Malware in sbrugna...

EUVD-2022-15736

Malicious code in bioql PyPI...

EUVD-2023-49666

Malicious code in bioql PyPI...

CVE-2020-26033

An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints for add and delete lack a CSRF token check...

Linux Distros Unpatched Vulnerability : CVE-2021-43332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentiall...

Linux Distros Unpatched Vulnerability : CVE-2019-3864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests include a specific parameter which is used as a...

CVE-2019-15002

An exploitable Cross-Site Request Forgery (CSRF) vulnerability exists in Atlassian Jira versions 7.6.4 through 8.1.0 . The root cause is that the login form does not require a CSRF token. An attacker can exploit this by submitting a POST request to /login.jsp with a valid username and password, w...

Centreon Web Cross-Site Request Forgery Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site request forgery vulnerability exists in Centreon-Web in Centreon Platform version 20.10...

CVE-2016-2041

libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences...

CVE-2016-2039

libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass intended access restrictions by predicting a value...