10424 matches found
CVE-2019-15934
Intesync Solismed 3.3sp has CSRF...
waplog.com Cross Site Request Forgery vulnerability
Open Bug Bounty ID: OBB-1037781 Security Researcher Auntor Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges Received 3 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting waplog.com website and its...
EulerOS Virtualization for ARM 64 3.0.3.0 : gnupg2 (EulerOS-SA-2019-2349)
According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery CSRF vulnerability in dirmngr that can result in Attack...
Cisco IOS XE NGWC Legacy Wireless Device Manager GUI CSRF Vulnerability (cisco-sa-20190821-iosxe-ngwc-csrf)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller NGWC which allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perfor...
CVE-2019-19516
Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...
CVE-2019-19469
In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...
Mail.ru: tracker.my.com information disclosure via csrf bypass
CSRF vulnerability in tracker.my.com allowed attacker to invite himself as a project owner via crossite request...
gettransfer.com Cross Site Request Forgery vulnerability
Open Bug Bounty ID: OBB-1024190 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-17590
The csrfcallback function in the CSRF Magic library through 2016-03-27 is vulnerable to CSRF protection bypass as it allows one to tamper with the csrf token values. A remote attacker can exploit this by crafting a malicious page and dispersing it to a victim via social engineering, enticing them...
CVE-2019-19013
A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to upload an arbitrary file by removing the CSRF token from a request...
PT-2019-14703 · Jenkins · Jenkins Google Compute Engine Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Google Compute Engine Plugin versions 4.1.1 and earlier Description: A cross-site request forgery issue exists in the ComputeEngineClouddoProvision function, which could be used to provision new agents. The Google Compute Engine Plugi...
TemaTres 3.0 - Cross-Site Request Forgery (Add Admin) Exploit
Exploit for php platform in category web applications Exploit Title: TemaTres 3.0 — Cross-Site Request Forgery Add Admin Author: Pablo Santiago Date: 2019-11-14 Vendor Homepage: https://www.vocabularyserver.com/ Source:...
CVE-2019-18651
A cross-site request forgery CSRF vulnerability in 3xLogic Infinias Access Control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions e.g., delete application users by sending a crafted HTML document or encoded URL to a user that the website trusts. The user...
CVE-2019-18651
CVE-2019-18651 is a CSRF vulnerability in 3xLogic Infinias Access Control up to version 6.6.9586.0. The flaw allows an attacker to trigger unauthorized actions (e.g., deleting application users) by enticing a trusted user with an crafted HTML document or encoded URL, provided the user has an acti...
Joomla 3.2.x < 3.9.13 Multiple Vulnerabilities (5780-joomla-3-9-13)
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.2.x prior to 3.9.13. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! before 3.9.13. A missing token check in comtemplate causes a CSRF vulnerability...
Schneider-electric Modicon Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401, BMXNOE0100x, and BMXNOE011xx; and Premium TSXETY4103, TSXETY5103, and TSXWMY100 PLC modules allows remote attackers to hijack the authentication of arbitrary...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information page. Users who are attacked with this vulnerability will be forced to modify their enrolled information, such as email and mobile phone, unintentionally. Attackers could use the reset password functi...
CVE-2019-18650
An issue was discovered in Joomla! before 3.9.13. A missing token check in comtemplate causes a CSRF vulnerability...