3 matches found
CVE-2025-53897: Cross-Site Request Forgery (CSRF)
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has...
EUVD-2017-11292
Malware in sbrugna...
Finjan SurfinGate Proxy FHTTP Command Admin Functions Authentication Bypass
The remote host is running a Finjan SurfinGate, a web proxy. It is possible to bypass admin authentication by using the proxy to connect to itself. A remote attacker could exploit this to view log information, force a policy update, or restart the service. C Tenable Network Security, Inc...