CVE-2019-7346

A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful...

Code injection

An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid...

CVE-2023-24476

CVE-2023-24476 affects PTC Vuforia Studio (all versions prior to 9.9 per CISA ICS bulletin). The root issue is Improper Authorization: an attacker with local access could record traffic and resend requests, bypassing server authentication for user/session validity. Documented impact focuses on lo...