CVE-2025-32900: Use of Less Trusted Source

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5...

EUVD-2020-5206

Malware in sbrugna...

EUVD-2001-1262

Malware in sbrugna...

EUVD-2019-7930

Malware in sbrugna...

EUVD-2015-7740

Malware in sbrugna...

EUVD-2019-15503

Malware in sbrugna...

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information...

EXNESS: Verification process done using different documents without corresponding to user information / User information can be changed after verification

A business logic flaw in the Exness trading platform allowed a verified user to change their profile information Name, DoB, and Address after identity verification. Additionally, a user could verify their account with official documents that did not correspond to their provided information. This...

Mail.ru: IDOR позволяет изменить информацию о пользователе.

An IDOR vulnerability in skillbox.ru allowed to change arbitrary user's information...

CVE-2019-11375

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...

CVE-2019-11375: Cross-Site Request Forgery (CSRF)

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...

Fuyang Xinpin Network Technology Co., Ltd. website building system has logical design loopholes

Fuyang Xinpin Network Technology Co., Ltd. is a technical enterprise focusing on providing full network marketing solutions for the majority of tourism enterprises. Fuyang Xinpin Network Technology Co., Ltd. station-building system has a logical design loophole, which can be exploited by attacker...

CVE-2018-11096: Cross-Site Request Forgery (CSRF)

Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account information remotely...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery

Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Date: 2018-05-18 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?srank=1520 Version: 1.6.2 Tested on: Kali linux Description : CSRF...

Secure Mail ActiveSync redirect 451

When migrating Exchange server for example from On-Premise Exchange to Office 365. Is it possible to have the Exchange server sending an HTTP 451 ActiveSync Redirect to point Secure Mail to the new server without installing a new instance of Secure Mail? Yes: The HTTP 451 is the supported mechani...

CVE-2015-7842: Undefined Security Weakness

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 wi...

Moodle 2.9.x < 2.9.9 Multiple Vulnerabilities

Binary data 9834.prm...

Beats By Dre Cross Site Request Forgery

Hello, I am Aaditya Purani, and i had found an CSRF Cross Site Request Forgery on Beats by Dr.Dre which could lead to full Account Takeover and Information change by Just sending a Malicious crafted Link to the user. Proof of Concept: Response : aisCustomerSavedSuccessfullya: true,...

HooToo Tripmate HT-TM01 2.000.022 - CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: HooToo Tripmate HT-TM01 Cross Site Request Forgery Date: 03Sep15 Exploit Author: Ken Smith Contact: https://twitter.com/P4tchw0rk Vendor Homepage: http://www.hootoo.com Version: HT-TM01, version 2.000.022 1. Description Various...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...