CVE-2026-64962 Cross-Site Request Forgery (CSRF) in ATutor

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-64962

ATutor's profile update functionality lacks CSRF token validation, allowing an attacker to craft a malicious site that submits forged profile-modification requests when visited by an authenticated victim. CVSS 5.1 (Medium), network attack vector. ATutor is end-of-life; no fix exists—upgrade to a ...

CVE-2026-64962 Cross-Site Request Forgery (CSRF) in ATutor

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

EUVD-2026-63362

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-28164

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

EUVD-2026-63327

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

CVE-2026-28164

The WordPress plugin Easy Elementor Addons (by HashThemes) versions up to and including 2.3.7 lacks CSRF token validation on its admin AJAX handlers, allowing an attacker to trick an authenticated administrator into executing arbitrary plugin configuration changes. CVSS 3.1 scores this CRITICAL (...

CVE-2026-28164 WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7...

WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Asim Alshaya in WordPress Plugin Easy Elementor Addons versions = 2.3.7...

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus. The chain,...

CVE-2026-14951

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages...

CVE-2026-14951

The FDS Web interface of FDS102 firmware for FAdC/FAdCi R2 lacks CSRF protection headers, allowing a low-privileged remote attacker to trick authenticated users into executing unintended actions via malicious web pages. Exploitation details are not provided; refer to the VDE-2026-078 advisory for...

CVE-2026-14951 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Cross-Site Request Forgery due to missing CSFR protection headers

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages...

WordPress Estatik plugin < 4.3.3 - Login CSRF vulnerability

Login CSRF vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Estatik versions 4.3.3...

XSRFProbe v3.0.0

XSRFProbe The Prime Cross Site Request Forgery Audit & Exploitation Toolkit. -blue.svg About XSRFProbe is an advanced Cross Site Request Forgery CSRF/XSRF Audit and Exploitation Toolkit. Equipped with a powerful crawling engine and numerous systematic checks, it is able to detect most cases of CS...

CVE-2026-76331

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:25+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76263

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

EUVD-2026-62914

In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Language SPL commands using the permissions of the authenticated user through a crafted Splunk Web link. The SPL commands could access...

PT-2026-79106

Frappe is a full-stack web application framework. In version 16.31.0 and earlier, the whitelisted frappe.model.workflow.bulk workflow approval endpoint in frappe/model/workflow.py accepts safe HTTP methods for state-changing workflow approvals because the endpoint is not restricted to POST. An...

CVE-2026-14951: Cross-Site Request Forgery (CSRF)

An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages...