GHSA-89R3-6X4J-V7WF OpenClaw: Voice-call Plivo replay mutates in-process callback origin before replay rejection

Summary Voice-call Plivo replay mutates in-process callback origin before replay rejection Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 can still mutate Plivo callback origin before replay rejection, but this needs a captured valid callback for a...

EUVD-2018-9143

Malware in sbrugna...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

Cross site request forgery (csrf)

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

CVE-2018-17389

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

CVE-2018-17389

CVE-2018-17389 describes a CSRF flaw in the Live Call Support Application version 1.5, specifically in server.php, that allows adding an admin account. The root cause is a Cross-Site Request Forgery vulnerability that can enable unauthorized admin account creation without user interaction beyond ...

PT-2019-9461

Name of the Vulnerable Software and Affected Versions Live Call Support Application version 1.5 Description The issue exists in the server.php file, allowing for the addition of an admin account due to CSRF. Recommendations For version 1.5, update the server.php file to include proper CSRF...

CVE-2018-17389: Cross-Site Request Forgery (CSRF)

CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account...

Live Call Support 1.5 Cross Site Request Forgery

Exploit Title: Live Call Support 1.5 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/live-call-support-widget-software-online-calling-web-application/22532799 Version: 1....

Live Call Support Widget 1.5 - Cross-Site Request Forgery (Add Admin)

Live Call Support Widget 1.5 - Cross-Site Request Forgery Add Admin Exploit Title: Live Call Support 1.5 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link:...

Live Call Support Widget 1.5 - Remote Code Execution / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Live Call Support 1.5 - Remote Code Execution / SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link:...