75 matches found
EUVD-2010-1181
Malware in sbrugna...
EUVD-2020-25374
Malware in sbrugna...
EUVD-2019-16268
Malware in sbrugna...
EUVD-2011-1494
Malware in sbrugna...
EUVD-2021-30682
Malicious code in bioql PyPI...
CVE-2020-4127
HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0....
CVE-2020-6844
In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...
CVE-2024-25977 Session Fixation
The application does not change the session token when using the login or logout functionality. An attacker can set a session token in the victim's browser e.g. via XSS and prompt the victim to log in e.g. via a redirect to the login page. This results in the victim's account being taken over...
Login/Signup Popup < 2.4 - Settings Reset via CSRF
The plugin does not have CSRF check when reseting its settings, which could allow attackers to make logged in admins perform such action via a CSRF attack Make a logged in admin open https://example.com/wp-admin/admin.php?page=easy-login-woocommerce-settings&reset=yes...
SUSE CVE-2018-16854
A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15...
Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack
Description Login CSRF via /register/confirm/token endpoint. Proof of Concept 1: Register account with the same username as our victim, an email confirmation will take place 2: Retrieve token from email. 3: Send a link http://BOOKSTACKAPPURL/register/confirm/token to user. 4: When the user clicks...
U.S. Dept Of Defense: Self stored Xss + Login Csrf
Description: User can set username between 8-20 alphanumeric characters, but with the help of inspect element attacker can manipulate ██████= & can insert a xss payload resulting in self stored xss & with the help of login csrf attacker can force the victim into attacker's account causing...
CVE-2020-4127
HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0....
Cross site request forgery (csrf)
HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0....
CVE-2020-4127
HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0....
CVE-2020-4127
HCL Domino is affected by a Login CSRF vulnerability (CVE-2020-4127). The issue could enable an attacker to trick an authenticated user into accessing a system under another ID or expose internal systems from the internet via the intranet user’s session. Public documents identify the affected pro...
Mail.ru: Blindy Replace User's Session with Attacker's Session
Login CSRF via OAuth code in lootdog.io...
CVE-2020-6844
Summary: CVE-2020-6844 concerns TopManage OLK 2020 with a/login CSRF vulnerability that can be chained with another vulnerability to takeover admin and user accounts. The combined effect is the potential takeover of accounts due to cross-site request forgery weaknesses in the login flow. What is ...
X (Formerly Twitter): login csrf in analytics.mopub.com
Description: There is no csrftoken validation while logging in which leads to csrf. base request : POST /login HTTP/1.1 Host: analytics.mopub.com Connection: close Content-Length: 37 Accept: application/json, text/plain, / Origin: https://analytics.mopub.com User-Agent: Mozilla/5.0 Windows NT 10....
FreeBSD : moodle -- Login CSRF vulnerability (889e35f4-f6a0-11e8-82dc-fcaa147e860e)
moodle reports : The login form is not protected by a token to prevent login cross-site request forgery. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors...