PT-2022-28133 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks a user into performing unintended actions on a web application...

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.5, which stems from a failure to trigger a notification for sensiti...

IBM DataPower Gateway Cross-Site Request Forgery Vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B, and cloud workloads. The platform protects, integrates, and optimizes access across channe...

PT-2022-23483 · Wellcms · Wellcms

Name of the Vulnerable Software and Affected Versions: Wellcms version 2.2.0 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Wellcms version 2.2.0, as a...

CVE-2022-31204

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations such as project/logic uploads and downloads. This...

PT-2022-22019 · Benjamin Balet · Jorani

Name of the Vulnerable Software and Affected Versions: Benjamin BALET Jorani version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /application/controllers/Users.php. This allows for unauthorized actions to be performed on behalf of a user without the...

PT-2022-20956 · Mercury · Mercury Mipc451-4

Name of the Vulnerable Software and Affected Versions: MERCURY MIPC451-4 version 1.0.22 Build 220105 Rel.55642n Description: The issue is a remote code execution RCE vulnerability. It can be exploited via a crafted POST request. Recommendations: For MERCURY MIPC451-4 version 1.0.22 Build 220105...

Xiaomi Mi Browser open redirection vulnerability

Xiaomi Mi browser is a lightweight web browser from Xiaomi Technology China, Inc. A security vulnerability exists prior to Xiaomi Mi Browser 15.8, which is caused by Xiaomi Mi browser not validating the validity of incoming data. An attacker could exploit this vulnerability to perform sensitive...

Tenda AX12 Cross-Site Request Forgery Vulnerability (CNVD-2022-63551)

Tenda AX12 is a dual-band gigabit Wifi 6 wireless router from Tenda, China.Tenda AX12 V22.03.01.21CN is vulnerable to cross-site request spoofing. users, an attacker could use the vulnerability to spoof malicious requests to trick victims into clicking to perform sensitive operations...

CVE-2020-14116

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

Information disclosure

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

CVE-2020-14116

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

CVE-2020-14116: Insufficient Verification of Data Authenticity

An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data. Attackers can perform sensitive operations by exploiting this...

PT-2022-8551

Name of the Vulnerable Software and Affected Versions Mi Browser affected versions not specified Description The issue is caused by the Mi Browser not verifying the validity of incoming data, leading to an intent redirection vulnerability. This allows attackers to perform sensitive operations by...

PT-2022-3548 · Aethon · Aethon Tug Home Base Server

Name of the Vulnerable Software and Affected Versions: Aethon TUG Home Base Server versions prior to version 24 Description: The issue is related to weaknesses in the authorization procedure of the server. It allows a remote attacker to exploit the weakness, potentially enabling them to add and...

PT-2021-4361 · Moxa · Moxa Mxview

Name of the Vulnerable Software and Affected Versions: Moxa MXView versions 3.x through 3.2.2 Description: The issue is related to an insecure transmission of credentials in the Moxa MXView network management software. It also involves a path traversal vulnerability that may allow an attacker to...

JEESNS Cross-site Request Forgery Vulnerability

JEESNS is a social management system developed on the JAVA enterprise platform. JEESNS version 1.4.2 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to elevate privileges and perform sensitive program operations...

Cross site request forgery (csrf)

Jeesns 1.4.2 contains a cross-site request forgery CSRF which allows attackers to escalate privileges and perform sensitive program operations...

PT-2021-10320

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: The issue allows attackers to escalate privileges and perform sensitive program operations due to a cross-site request forgery CSRF. Recommendations: For Jeesns version 1.4.2, update to a version that contain...

Sqlite 跨站请求伪造漏洞

Sqlite is a lightweight database that is ACID compliant relational database management system. A security vulnerability exists in sqlite sqlite-web that allows sensitive operations to be performed without verifying that the request is from the application...