Lucene search
+L

212 matches found

OSV
OSV
added 2025/11/07 6:15 p.m.11 views

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...

6.5CVSS5.8AI score0.00148EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/11/07 12:00 a.m.20 views

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...

0.00148EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/07 12:00 a.m.22 views

CVE-2025-63716

The CVE-2025-63716 entry concerns SourceCodester Leads Manager Tool v1.0, which is vulnerable to Cross-Site Request Forgery (CSRF). The root cause stated across sources is lack of CSRF protection mechanisms (no anti-CSRF tokens and no same-origin verification) on critical endpoints, enabling unau...

6.5CVSS6.6AI score0.00148EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/11/07 12:00 a.m.10 views

SourceCodester Leads Manager Tool 安全漏洞

SourceCodester Leads Manager Tool is an open source leads management tool from SourceCodester. A security vulnerability exists in SourceCodester Leads Manager Tool version 1.0, which stems from the lack of a CSRF protection mechanism that could lead to cross-site request forgery attacks...

6.5CVSS6.6AI score0.00148EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/07 12:00 a.m.4 views

CVE-2025-63716

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery CSRF attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints...

6.5AI score0.00148EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-0169

Malware in sbrugna...

3.5CVSS6.4AI score0.00783EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-0154

Malware in sbrugna...

3.5CVSS6.4AI score0.00832EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-2145

Malware in sbrugna...

7.8CVSS7.7AI score0.09235EPSS
SaveExploits5References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2015-0165

Malware in sbrugna...

3.5CVSS6.4AI score0.00669EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2011-4597

Malware in sbrugna...

4CVSS6.4AI score0.01037EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-0153

Malware in sbrugna...

6CVSS6.4AI score0.00489EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-0164

Malware in sbrugna...

6.5CVSS6.4AI score0.01129EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2025-31561

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00237EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-4595

Malicious code in bioql PyPI...

7.2CVSS9.1AI score0.00433EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-48782

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00412EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-52925

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00259EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-48531

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.0069EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2024-48530

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00891EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/09/30 9:38 a.m.13 views

CVE-2025-10345

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

6.1CVSS7AI score0.00237EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/29 9:15 a.m.10 views

CVE-2025-10345

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'...

6.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder