CVE-2026-102787 Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116839

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices. A malicious actor can exploit this by luring an authenticated user to a malicious page, enabling the attacker to make unauthorized changes and execute a Denial of Service (DoS) attack on the device. No specific exploita...

EUVD-2026-110579

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

EUVD-2026-110578

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116838

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices . A malicious actor can lure an authenticated user to a malicious page to trigger the CSRF, which can then be used to execute Command Injection on the device. No specific remediation or exploit details are provided in th...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

PT-2026-126370

REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend users with media permissions into clicking a crafted link. Th...

PT-2026-126360

REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. Attackers can lure a logged-in administrator into opening a crafted link to disable global safe mode, writing safe mode:...

PT-2026-125549

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

Semantic MediaWiki authorization issue vulnerability

Versions 3.0.0 through 7.3.0 of Semantic MediaWiki contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the smwtask module within api.php. Unauthenticated attackers can exploit publicly available anonymous CSRF tokens to perform maintenance...

PT-2026-125550

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116863: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2...

PT-2026-126304

Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5...

PT-2026-126351

Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only maintenance tasks. Attackers can use the public anonymous CSRF token to read internal store statistics, enqueue jobs like...

PT-2026-126335

SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped default parameter in JsonResultPrinter. Attackers can lure victims to a crafted Special:Ask link with a zero-result query...

Semantic MediaWiki authorization issue vulnerability

Versions of Semantic MediaWiki prior to 7.3.0 and 7.3.1 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization validation in the smwtask API module. Unauthenticated attackers can use a public anonymous CSRF token to execute arbitrary task types without...