CVE-2024-12594: Missing Authorization

The Custom Login Page Styler – Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login , Login customizer, Hide wp-login – Limit Login Attempts – Locked Site plugin for WordPress is vulnerable to privilege escalation due to a...

CVE-2023-46777: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin = 1.1.3 versions...

PT-2019-18575

Name of the Vulnerable Software and Affected Versions ZyXEL VMG3312-B10B DSL-491HNU-B1B version 2 Description The issue allows for CSRF Cross-Site Request Forgery attacks on the login/login-page.cgi endpoint. Recommendations For ZyXEL VMG3312-B10B DSL-491HNU-B1B version 2, consider implementing...

CVE-2019-7391: Cross-Site Request Forgery (CSRF)

ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF...

PT-2018-15408

Name of the Vulnerable Software and Affected Versions MetInfo versions 6.x through 6.1.3 Description The issue allows for XSS via the "/admin/login/login check.php" API endpoint, specifically through the url array parameter. Recommendations For MetInfo versions 6.x through 6.1.3, avoid using the...

PT-2014-8693

Name of the Vulnerable Software and Affected Versions Subex ROC Fraud Management versions 7.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the ranger username parameter in the login page, specifically the "login/login" endpoint. Recommendations F...