72 matches found
TPLink #TLWR840N / #TLWR841N - Authenticaton Bypass Vulnerability
Exploit for hardware platform in category web applications Title: TP-Link Multiple RouterTL-WR840N and TL-WR841N Unauthenticated Router Access Vulnerability Author: BlackFog Team Website: SecureLayer7.net Contact: email protected Version: 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n Hardware:...
Wordpress Codestyling Localization plugin multiple cross-site request forgery vulnerabilities
WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Codestyling Localization is one of the localization language development translation package plugin. Multiple...
Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability
Cisco Prime Service Catalog PSC is a service catalog solution from Cisco USA that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for computing, networking, storage, and other data center resources. A cross-site request forge...
CVE-2018-0107
A vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by...
PT-2017-12446 · Cisco · Cisco Spa500 Series Ip Phones +1
Name of the Vulnerable Software and Affected Versions: Cisco SPA300 and SPA500 Series IP Phones affected versions not specified Description: A lack of cross-site request forgery CSRF protection in the Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to...
IBM Emptoris Services Procurement Cross-Site Request Forgery Vulnerability
IBM Emptoris Services Procurement is a procurement management system from IBM USA. The system controls and manages the procurement lifecycle for third-party service categories. A cross-site request forgery vulnerability exists in IBM Emptoris Services Procurement version 10.x. A remote attacker...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-08540)
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.18 and earlier. A remote attacker can exploit this vulnerability to perform unauthoriz...
Tildeslash Monit Service Manager Cross-Site Request Forgery Vulnerability
Tildeslash Monit is the Norwegian company Tildeslash's set of open source for the management and monitoring of Unix system applications . Monit Service Manager is one of the service management component . A cross-site request forgery vulnerability exists in Tildeslash Monit Service Manager versio...
Multiple Cross-Site Request Forgery Vulnerabilities in Magento
Magento is a professional open source PHP e-commerce system from Magento, USA, which provides permission management, search engine and payment gateway. Magento has multiple cross-site request forgery vulnerabilities. Allow remote attackers to perform certain unauthorized operations...
Telnet-Ftp Service Server 1.x - (Authenticated) Multiple Vulnerabilities
/ Telnet-Ftp Service Server v1.x ------------------------------ Multiple Vulnerability: -Remote Creat File -Remote Delet File -Remote Creat Directory -Remote Delet Directory -Remote Get File -Remote Crash...
security flaw
The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be...