51190 matches found
CVE-2025-43748
Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows...
CVE-2025-43748
Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows...
Linux Distros Unpatched Vulnerability : CVE-2024-52948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout CVE-2024-52948 Note that Nessus relies on the presence of the...
Exploit for CVE-2025-9215
StoreEngine Powerful WordPress eCommerce Plugin for Payments,...
CVE-2025-43745
A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and 7.4 GA through update 92 allows remo...
CVE-2025-7668
The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the 'inux-promotional-plugin.php' page. This makes it possible for unauthenticated attackers to update...
Linux Distros Unpatched Vulnerability : CVE-2020-13350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runner...
WordPress plugin weichuncai 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress QSM plugin < 10.2.3 - Template Creation via CSRF vulnerability
Template Creation via CSRF vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Quiz And Survey Master versions 10.2.3...
Malicious code in style-loader-elara-protractor-csrf (npm)
The package style-loader-elara-protractor-csrf was found to contain malicious code...
Malicious code in rehype-redshift-aether-csrf (npm)
The package rehype-redshift-aether-csrf was found to contain malicious code...
Malicious code in changelog-browserify-csrf-levels (npm)
The package changelog-browserify-csrf-levels was found to contain malicious code...
Malicious code in cressida-nashira-vortex-csrf (npm)
The package cressida-nashira-vortex-csrf was found to contain malicious code...
Malicious code in kryptor-csrf (npm)
The package kryptor-csrf was found to contain malicious code...
MAL-2025-34117 Malicious code in style-loader-elara-protractor-csrf (npm)
The package style-loader-elara-protractor-csrf was found to contain malicious code...
MAL-2025-17789 Malicious code in csrf-ursa-rest-carpo (npm)
The package csrf-ursa-rest-carpo was found to contain malicious code...
MAL-2025-40198 Malicious code in yaml-avior-sync-csrf (npm)
The package yaml-avior-sync-csrf was found to contain malicious code...
Malicious code in quito-cryovolcano-relay-csrf (npm)
The package quito-cryovolcano-relay-csrf was found to contain malicious code...