CVE-2018-25151: Cross-Site Request Forgery (CSRF)

Ecessa WANWorx WVR-30 versions before 10.7.4 contain a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can craft a malicious web page with a hidden form to create a new superuser account by tricking an...

EUVD-2021-26508

Malware in sbrugna...

CVE-2021-3165: Incorrect Permission Assignment for Critical Resource

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

CVE-2018-13032: Cross-Site Request Forgery (CSRF)

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/plweb.cgi/utilconfigloginact URI...

OpenText Documentum D2 - Remote Code Execution

/ CVE Identifier: CVE-2017-5586 Vendor: OpenText Affected products: Documentum D2 version 4.x Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Document D2 contains vulnerable BeanShell bsh and Apache Commons libraries and...

CVE-2015-1481: Undefined Security Weakness

Ansible Tower aka Ansible UI before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account...

Joomla! 1.6.3 - Cross-Site Request Forgery

Joomla! 1.6.3 - Cross-Site Request Forgery This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy,...

Joomla! 1.6.3 - Cross-Site Request Forgery

This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires & Stacy, Rage, coorslitedude,...

CVE-2008-2053: Undefined Security Weakness

Unspecified vulnerability in Cisco Unified Customer Voice Portal CVP 4.0.x before 4.02ES14, 4.1.x before 4.11ES11, and 7.x before 7.01 allows remote authenticated users with administrator role privileges to create, modify, or delete a superuser account...