CVE-2025-32900: Use of Less Trusted Source

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5...

EUVD-2001-1262

Malware in sbrugna...

EUVD-2015-7740

Malware in sbrugna...

EUVD-2020-5206

Malware in sbrugna...

EUVD-2019-15503

Malware in sbrugna...

EUVD-2019-7930

Malware in sbrugna...

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information...

PT-2022-13750

Name of the Vulnerable Software and Affected Versions Ask me WordPress theme versions prior to 6.8.4 Description The issue allows an attacker to trick a user into changing their profile information by sending a crafted request to the Edit Profile page, due to the lack of nonce checks when...

EXNESS: Verification process done using different documents without corresponding to user information / User information can be changed after verification

A business logic flaw in the Exness trading platform allowed a verified user to change their profile information Name, DoB, and Address after identity verification. Additionally, a user could verify their account with official documents that did not correspond to their provided information. This...

Mail.ru: IDOR позволяет изменить информацию о пользователе.

An IDOR vulnerability in skillbox.ru allowed to change arbitrary user's information...

CVE-2019-11375

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...

CVE-2019-11375: Cross-Site Request Forgery (CSRF)

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI...

Fuyang Xinpin Network Technology Co., Ltd. website building system has logical design loopholes

Fuyang Xinpin Network Technology Co., Ltd. is a technical enterprise focusing on providing full network marketing solutions for the majority of tourism enterprises. Fuyang Xinpin Network Technology Co., Ltd. station-building system has a logical design loophole, which can be exploited by attacker...

PT-2018-17913

Name of the Vulnerable Software and Affected Versions HPE UIoT versions 1.2.4.2, 1.4.0, 1.4.1, 1.4.2, 1.5 Description A remote unauthorized access issue was identified, allowing information to be changed by other users due to a malfunction in a section of the DSM portal and some DSM APIs...

CVE-2018-11096: Cross-Site Request Forgery (CSRF)

Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account information remotely...

Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery

Exploit Title: Infinity Market Classified Ads Script 1.6.2 - Cross-Site Request Forgery Date: 2018-05-18 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/classifieds-multipurpose-portal-infinity-market/16572285?srank=1520 Version: 1.6.2 Tested on: Kali linux Description : CSRF...

Secure Mail ActiveSync redirect 451

When migrating Exchange server for example from On-Premise Exchange to Office 365. Is it possible to have the Exchange server sending an HTTP 451 ActiveSync Redirect to point Secure Mail to the new server without installing a new instance of Secure Mail? Yes: The HTTP 451 is the supported mechani...

CVE-2015-7842: Undefined Security Weakness

Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 wi...

Moodle 2.9.x < 2.9.9 Multiple Vulnerabilities

Binary data 9834.prm...

Beats By Dre Cross Site Request Forgery

Hello, I am Aaditya Purani, and i had found an CSRF Cross Site Request Forgery on Beats by Dr.Dre which could lead to full Account Takeover and Information change by Just sending a Malicious crafted Link to the user. Proof of Concept: Response : aisCustomerSavedSuccessfullya: true,...