CVE-2019-6508

An issue was discovered in creditease-sec insight through 2018-09-11. rolepermdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6510

An issue was discovered in creditease-sec insight through 2018-09-11. userdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6507

An issue was discovered in creditease-sec insight through 2018-09-11. loginuserdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6510

An issue was discovered in creditease-sec insight through 2018-09-11. userdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6510

The CVE-2019-6510 entry describes a CSRF weakness in creditease-sec insight up to 2018-09-11, specifically in the user_delete function of srcpm/app/admin/views.py. The issue arises from lack of sufficient CSRF protection, enabling potential unauthorized state-changing requests. CVSS data from NVD...

CVE-2019-6509

CVE-2019-6509 affects creditease-sec insight (through 2018-09-11). The vulnerability lies in depart_delete within srcpm/app/admin/views.py, which allows Cross-Site Request Forgery (CSRF). The available sources confirm the CSRF weakness but do not specify affected versions, exact exploit condition...

CVE-2019-6509

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6508

An issue was discovered in creditease-sec insight through 2018-09-11. rolepermdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6507

An issue was discovered in creditease-sec insight through 2018-09-11. loginuserdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6508

CVE-2019-6508 affects creditease-sec insight (through 2018-09-11). The issue is in role_perm_delete in srcpm/app/admin/views.py and is a CSRF vulnerability. The NVD entry lists this as a CSRF weakness with CVSS metrics: CVSS v2 base score 6.8 (Partial confidentiality, integrity, availability) and...

CVE-2019-6509

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

PT-2019-18127

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the role perm delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...

PT-2019-18129

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the user delete function, located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider implementi...

PT-2019-18126

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the login user delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...

PT-2019-18128

Name of the Vulnerable Software and Affected Versions creditease-sec insight versions through 2018-09-11 Description An issue was discovered that allows CSRF, specifically in the depart delete function within the srcpm/app/admin/views.py file. Recommendations For creditease-sec insight versions...

CVE-2019-6510: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. userdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6509: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6508: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. rolepermdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6507: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. loginuserdelete in srcpm/app/admin/views.py allows CSRF...

U.S. Issues Multiple Charges For 2016 SEC Hack

Two Ukrainains have been indicted in hacking the U.S. Securities and Exchange Commission SEC in order to steal and sell non-public, confidential information from publicly-traded companies. The two have been charged as part of a large-scale conspiracy to hack the SEC’s computer systems and profit ...