57761 matches found
PT-2025-40922
Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Request Forgery CSRF flaw exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to execute...
EUVD-2025-32452
A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. Th...
CVE-2025-11286 samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery
A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. Th...
CVE-2025-10302
The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on thesaveoptions function. This makes it possible for unauthenticated attackers to update the plugin's settings...
CVE-2025-9897
The AP Background plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to missing or incorrect nonce validation on the advParallaxBackAdminSaveSlider function. This makes it possible for unauthenticated attackers to create or...
PT-2025-40834
CVE-2025-61893 - Cisco WebEx Meeting Server Cross-Site Request Forgery CVE ID : CVE-2025-61893 Published : Oct. 4, 2025, 3:15 a.m. | 4 hours, 13 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timelin...
PT-2025-40833
CVE-2025-61892 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-61892 Published : Oct. 4, 2025, 3:15 a.m. | 4 hours, 13 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...
WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...
WordPress Optimize More! – CSS plugin <= 1.0.3 - Cross-Site Request Forgery to Plugin Settings Reset vulnerability
Cross-Site Request Forgery to Plugin Settings Reset vulnerability discovered by Nabil Irawan in WordPress Plugin Optimize More! – CSS versions = 1.0.3...
WordPress ContentMX Content Publisher plugin <= 1.0.6 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin ContentMX Content Publisher versions = 1.0.6...
WordPress Mobile Site Redirect plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Mobile Site Redirect versions = 1.2.1...
CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...
CVE-2025-10695 OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...
CVE-2025-10695
Two unauthenticated diagnostic endpoints in OpenSupports 4.11.0 allow arbitrary backend-initiated connections to an attacker-controlled destination, enabling unauthenticated SSRF for internal network scanning and service interaction. Affected product/version: OpenSupports 4.11.0. Root cause: endp...
EUVD-2021-7901
Malicious code in bioql PyPI...
EUVD-2022-51701
Malicious code in bioql PyPI...
EUVD-2025-12034
Malicious code in bioql PyPI...
EUVD-2023-36361
Malicious code in bioql PyPI...