CVE-2021-24636

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce CSRF checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link...

CVE-2021-24636

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce CSRF checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link...

CVE-2021-24636

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce CSRF checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link...

CVE-2021-24636

The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce CSRF checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link...

WordPress plugin cross-site request forgeing vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site request forgery vulnerability...

Cross-Site Request Forgery (CSRF) in justingit/dada-mail

✍️ Description Attacker able to Delete All Data in Tracker plugin with CSRF attack. In CSRF attacks it is necessary that a user logged into your application and just going to a malicious website and after that only with a redirection attacker can perform attack on unprotected endpoint, this means...

Compro Technology IP Camera - 'killps.cgi' Denial of Service (DoS)

Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor...

CVE-2021-40378

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

CVE-2021-40378

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

CVE-2021-40378

CVE-2021-40378 affects Compro IP70 (versions 2.08_7130218), IP570 (2.08_7130520), IP60, and TN540. The vulnerability stems from the /cgi-bin/support/killps.cgi endpoint, which can delete all data on the device when accessed after logging in, enabling a data loss condition. Public references descr...

CVE-2021-40378

An issue was discovered on Compro IP70 2.087130218, IP570 2.087130520, IP60, and TN540 devices. /cgi-bin/support/killps.cgi deletes all data from the device...

PT-2021-22884

Name of the Vulnerable Software and Affected Versions Compro IP70 version 2.08 7130218 Compro IP570 version 2.08 7130520 Compro IP60 affected versions not specified Compro TN540 affected versions not specified Description An issue was discovered that affects the deletion of all data from the...

comppro IP70 security vulnerabilities

The comppro IP70 is a network camera. A security vulnerability exists in the comppro IP70 2.08 7130218, IP570 2.08 7130520, IP60 and TN540 devices, which can be exploited by an attacker to delete all data from the device via /cgi bin/support/killps.cgi...

Cross-Site Request Forgery (CSRF) in erikdubbelboer/phpredisadmin

✍️ Description The delete key functionality in the application is vulnerable to CSRF attack. 🕵️‍♂️ Proof of Concept history.pushState'', '', '/' 💥 Impact This vulnerability can let an attacker delete data from the database without the knowledge/interaction of the user...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if th...

CVE-2021-20768

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege...

CVE-2021-20768

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege...

Design/Logic Flaw

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege...

CVE-2021-20768: Undefined Security Weakness

Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege...

CVE-2021-34661 WP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion

The WP Fusion Lite WordPress plugin is vulnerable to Cross-Site Request Forgery via the showlogssection function found in the /includes/admin/logging/class-log-handler.php file which allows attackers to drop all logs for the plugin, in versions up to and including 3.37.18...