CVE-2024-55271

نظام إدارة الصالة الرياضية CVE-2024-55271 نظام إدارة صالة رياضية مبني باستخدام PHP وMySQL. المدقق Shoaib Alam - ملف لينكد إن الوصف ثغرة CSRF في قسم تحديث الملف الشخصي تم تحديد ثغرة من نوع Cross-Site Request Forgery CSRF في نظام إدارة الصالة الرياضية. هذه المشكلة موجودة في وظيفة تحديث الملف الشخصي...

CVE-2019-19652

CVE-2019-19652 Attaque de rétrogradation Chevereto - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. Un administrateur peut ordonner au script de mise à jour de rétrograder vers une autre version au lieu de mettre à niveau, réintroduisant ainsi des failles antérieures. En raison de l'absence d'un jeton CSRF,...

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Exploitation du routeur TP-Link Archer CR-700. Divulgué de manière responsable à TP-Link Étape 1- Sur votre machine Linux Kali ou Ubuntu, tapez la commande suivante gedit /etc/dhcp/dhclient.conf Commentez la ligne ci-dessous send host-name = gethostname; Copiez-l...

Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

Exploitation de CSRF sur SCOPIA XT Desktop version 8.3.915.4 Ce PoC décrit comment exploiter la faille de type Cross-Site Request Forgery CSRF sur SCOPIA XT Desktop version 8.3.915.4 À propos de SCOPIA site web : https://support.avaya.com/products/P1421/scopia-desktop/8.2.1 À propos de la...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

CVE-2025-56311

CVE-2025-56311: نشرة أمنية – ثغرة CSRF في وظيفة إعادة التشغيل لجهاز التوجيه FD602GW-DX-R410 إثبات المفهوم ونشرة أمنية لثغرة تزوير الطلب عبر المواقع CSRF في واجهة الإدارة لجهاز التوجيه الليفي FD602GW-DX-R410 البرنامج الثابت V2.2.14. توضح النشرة الأثر، ناقل الهجوم، والتوصيات للعلاج...

CVE-2026-26718

الوصف ملخص توجد ثغرة أمنية من نوع تزوير الطلب عبر المواقع CSRF في تطبيق الويب xxl-job-admin تسمح للمهاجم بإجراء تعديلات غير مصرح بها على نصوص شل الخاصة بـ Glue IDE. يفتقر نقطة النهاية المتأثرة إلى التحقق المناسب من رمز CSRF وتقبل طرق HTTP عشوائية عبر تعيين طلب متساهل. المنتجات المتأثرة xxl-job...

CVE-2525-25748-Cross-Site-Request-Forgery-CSRF-Vulnerability-in-HotelDruid-3.0.7

CVE-2025-25748-Vulnérabilité-de-Cross-Site-Request-Forgery-CSRF-dans-HotelDruid-3.0.7 Description Une vulnérabilité de Cross-Site Request Forgery CSRF dans le point d'accès gestioneutenti.php de HotelDruid 3.0.7 permet aux attaquants d'effectuer des actions non autorisées par exemple, modifier le...

CVE-2017-9934

CVE-2017-9934 أنا مبلّغ هذا الاستغلال، تحت اسم: Envo جوملا 1.7.3 - 3.7.2 إثبات مفهوم استغلال CSRF تعمل هذه الثغرة بسبب أن إصدارات جوملا من 1.7.3 إلى 3.7.2 لا تقوم بتنظيف مدخلات base64. الرؤوس: POST http://localhost/joomla/administrator/index.php?option=commenus&view=item&clientid=0&layout=edit&id...

CVE-2026-85289 InvoicePlane: Missing CSRF Token Validation on Multiple Delete Endpoints

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensurevalidpostrequest from delete methods including Payments::delete, Recurring::delete, and Userclients::delete. Although the routes require POST, they do not...

CVE-2026-85289

The open-source application InvoicePlane (prior to version 1.7.2) is vulnerable to Cross-Site Request Forgery (CSRF) due to missing CSRF token validation on specific delete methods. Specifically, the Payments::delete(), Recurring::delete(), and User_clients::delete() functions omit the ensure_val...

CVE-2026-90903 Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0

Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The administrator ApiController only validated CSRF tokens inside the products action. All other administrative AJAX endpoints orders, coupons, media,...

EUVD-2026-85558

Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0 - The administrator ApiController only validated CSRF tokens inside the products action. All other administrative AJAX endpoints orders, coupons, media,...

CVE-2026-90900 Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0 - The product review submission endpoint index.php?option=comeasystore&task=product.addReview accepted submissions without verifying an anti-CSRF token t...

VulnCheck KEV: CVE-2026-75949

Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion path traversal in J-BusinessDirectory 6.2.3 - Upload/remove accepted a client-controlled root pathtype could point at the component site/admin trees, did not enforce path containment, and used a weak extension check. CSRF token w...

CVE-2026-18425

Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action Concrete\Controller\Backend\Dashboard\SitemapUpdate using only the global accesssitemap task permission and did not check per-page edit permission before updating each page's display order. As a result, an authenticated...

CVE-2026-81925

Concrete CMS versions before 9.5.3 contain a reflected cross-site scripting (XSS) vulnerability in the conversation view endpoint . A user-supplied custom date format was improperly neutralized when rendering conversation messages, allowing an attacker to execute arbitrary JavaScript in a victim'...

EUVD-2026-76246

Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller concrete/controllers/dialog/event/duplicate.php submit action, which duplicated a calendar event after checking only canAccess and the per-resource canAddCalendarEvent permission, so a...

PT-2026-89383

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user's channel password by sending a GET request. Attackers can craft a malicious webpage tha...

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...