10425 matches found
CVE-2014-0835
Cross-site request forgery CSRF vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings...
Using USB Modems to Phish and Send Malicious SMS Messages
Some USB modems can be leveraged to send malicious SMS messages and even carry out spear-phishing attacks – sometimes in conjunction with each other – thanks to a cross-site request forgery vulnerability present in the device’s web interfaces. According to Swedish security researcher Andreas Lind...
IBM WebSphere Application Server 8.0 < Fix Pack 8 Multiple Vulnerabilities
IBM WebSphere Application Server 8.0 before Fix Pack 8 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - A CSRF vulnerability exists in IBM WebSphere Application Server due to improper validation of portlets in the Administrative...
CVE-2014-1211
Cross-site request forgery CSRF vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout...
PHPJabbers Property Listing Script 2.0添加管理员CSRF漏洞
No description provided by source. Property Listing Script V2.0 - Add Admin CSRF Vulnerability ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
CVE-2013-7107
Cross-site request forgery CSRF vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106...
CVE-2013-7107
Cross-site request forgery CSRF vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106...
CFME: GET request CSRF vulnerability
CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protectfromforgery mechanism and conduct cross-site request forgery CSRF attacks via a destructive action in a request...
Conceptronic Wireless Pan & Tilt Network Camera - CSRF Vulnerability
Exploit for hardware platform in category web applications Affected Product: Conceptronic camera CIPCAMPTIWL Tested Firmware: 21.37.2.49 Tested Web UI Firmware: 0.61.4.18 Assigned CVE: CVE-2013-7204 CVSSv2 Base Score: 5.8 AV:N/AC:M/AU:N/C:P/I:P/A:N Vulnerability Type: Cross-Site Request Forgery...
Auto Classifieds Script 2.0 - Add Admin CSRF Vulnerability
Auto Classifieds Script version 2.0 suffers from a cross site request forgery vulnerability. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
D-Link DSL-2750U ME_1.09 - CSRF Vulnerability
This router allows an attacker to bypass authentication and login to the setup page after that just make any settings and save or apply it and it's going to say "worng old password" Don't worry just hit ok . now you are in the Router settings you can Download the config file or whatever yuo want!...
UBUNTU-CVE-2013-7233
Cross-site request forgery CSRF vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list...
CVE-2013-7233
CVE-2013-7233 is a CSRF vulnerability in WordPress
ThinkSAAS某处CSRF导致直接GETSHELL
简要描述： ThinkSAAS某处CSRF导致直接GETSHELL 详细说明： 看看系统升级的代码： None 把此为页面的链接发送给管理员，管理员点击即可拿到shell。...
[OWASP CSRFTester] Facilitates Ability to Test Applications for CSRF
OWASP CSRFTester is a tool for testing CSRF vulnerability in websites. Just when developers are starting to run in circles over Cross Site Scripting, the 'sleeping giant' awakes for yet another web-catastrophe. Cross-Site Request Forgery CSRF is an attack whereby the victim is tricked into loadin...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors...
CVE-2013-6883
CVE-2013-6883 describes a CSRF vulnerability in the CRU Ditto Forensic FieldStation, affecting firmware before 2013-Oct-15a. The issue allows remote attackers to hijack an administrator’s authentication to perform actions that modify the device’s disk-erase technique settings via unspecified vect...
CVE-2013-6192
HP Operations Orchestration is affected by CVE-2013-6192 through CSRF in versions earlier than 9, which could allow remote attackers to hijack user sessions via unknown vectors. The vulnerability is documented with a base CVSS-like impact as partial impact to confidentiality, integrity, and avail...