Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

471 matches found

CNVD
CNVD•added 2021/11/16 12:00 a.m.•55 views

ShowDoc Cross-Site Request Forgery Vulnerability

ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...

6.5CVSS3.8AI score0.00411EPSS
SaveExploits1References1
CNVD
CNVD•added 2021/11/16 12:00 a.m.•61 views

ShowDoc Cross-Site Request Forgery Vulnerability

ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...

5.8CVSS3.7AI score0.00413EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog•added 2021/11/15 11:16 p.m.•31 views

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.8CVSS5.6AI score0.00413EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2021/11/15 11:16 p.m.•38 views

GHSA-PJJF-HC4Q-G298 showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.3AI score0.00413EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog•added 2021/11/15 11:13 p.m.•28 views

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.3AI score0.00411EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2021/11/15 11:13 p.m.•50 views

GHSA-X5JP-9FMM-M9PF showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS6.3AI score0.00411EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog•added 2021/11/15 11:13 p.m.•34 views

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.8CVSS5.6AI score0.00413EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2021/11/15 11:13 p.m.•44 views

GHSA-M4HJ-WG2R-QPCR showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

4.3CVSS5.3AI score0.00413EPSS
SaveExploits1References4
Huntr
Huntr•added 2021/11/15 1:32 p.m.•24 views

Open Redirect in star7th/showdoc

Description Open Redirect at login page due to unchecked "redirect" parameter. Vulnerable parameter redirect Payload /%09/google.com Proof of Concept Send users the following login link https://www.showdoc.com.cn/user/login?redirect=/%09/google.com After users use their registered account to logi...

5.8CVSS0.5AI score0.00761EPSS
SaveExploits1References1
Veracode
Veracode•added 2021/11/15 4:27 a.m.•27 views

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The vulnerability exists through the register function in UserController.class.php, allowing an attacker to add any member to the team...

5.4CVSS4AI score0.00413EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode•added 2021/11/15 4:16 a.m.•15 views

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The server is unable to verify the authenticity of web requests due to a lack of anti-CSRF protection mechanism in the REST API, allowing an attacker to add any member for any item if users visit the attacker site...

5.4CVSS5.3AI score0.00413EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode•added 2021/11/15 3:07 a.m.•21 views

Cross-Site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. An attacker can add arbitrary members to the team through the register function in UserController.class.php...

6.5CVSS5.1AI score0.00411EPSS
SaveExploits1References4Affected Software1
NVD
NVD•added 2021/11/13 10:15 a.m.•18 views

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.8CVSS0.00413EPSS
SaveExploits1References2
OSV
OSV•added 2021/11/13 10:15 a.m.•10 views

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.9AI score
SaveExploits0References2
NVD
NVD•added 2021/11/13 10:15 a.m.•28 views

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS0.00411EPSS
SaveExploits1References2
NVD
NVD•added 2021/11/13 10:15 a.m.•22 views

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.8CVSS0.00413EPSS
SaveExploits1References2
OSV
OSV•added 2021/11/13 10:15 a.m.•10 views

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS6.9AI score
SaveExploits0References2
OSV
OSV•added 2021/11/13 10:15 a.m.•17 views

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.4CVSS6.9AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2021/11/13 10:15 a.m.•9 views

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.5CVSS6.2AI score0.00411EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB•added 2021/11/13 10:15 a.m.•6 views

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

5.8CVSS5.8AI score0.00413EPSS
SaveExploits1References3
Rows per page
Query Builder