Lucene search
+L

6352 matches found

attackerkb
attackerkb
•added 2026/01/28 11:55 a.m.•11 views

CVE-2025-59895

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service DoS vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious reques...

8.2CVSS5.9AI score0.00405EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2026/01/28 11:55 a.m.•16 views

EUVD-2025-206494

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service DoS vulnerability in the configuration restore functionality. The issue is due to insufficient validation of user-supplied data during this process. An attacker could send malicious reques...

8.2CVSS5.9AI score0.00405EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/28 11:53 a.m.•8 views

CVE-2025-59894 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/28 11:53 a.m.•8 views

CVE-2025-59894

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2026/01/28 11:53 a.m.•37 views

CVE-2025-59894

CVE-2025-59894 is a CSRF flaw affecting Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. The issue arises from missing CSRF token validation, enabling an authenticated attacker to induce other logged-in users to perform unintended actions, such as issuing a POST to delet...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
•added 2026/01/28 11:53 a.m.•21 views

EUVD-2025-206493

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/28 11:53 a.m.•54 views

CVE-2025-59894 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/28 11:52 a.m.•57 views

CVE-2025-59893 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 11:52 a.m.•33 views

CVE-2025-59893

CVE-2025-59893 is a CSRF vulnerability affecting Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated attacker could induce another user to perform unwanted actions due to missing CSRF token protection. The description notes a specific vector: a POST request...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software2
attackerkb
attackerkb
•added 2026/01/28 11:52 a.m.•14 views

CVE-2025-59893

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
•added 2026/01/28 11:52 a.m.•19 views

EUVD-2025-206492

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/28 11:52 a.m.•9 views

CVE-2025-59892

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2026/01/28 11:52 a.m.•9 views

CVE-2025-59892 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/28 11:52 a.m.•48 views

CVE-2025-59892 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/28 11:52 a.m.•35 views

CVE-2025-59892

Cross-Site Request Forgery (CSRF) vulnerability affecting Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. Root cause: lack of proper CSRF token implementation allows an authenticated user to cause actions on behalf of another user. Practical impact includes unauthentica...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
•added 2026/01/28 11:52 a.m.•17 views

EUVD-2025-206490

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/28 11:52 a.m.•9 views

CVE-2025-59891 Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/28 11:52 a.m.•19 views

EUVD-2025-206489

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/28 11:52 a.m.•14 views

CVE-2025-59891

Cross-Site request forgery CSRF vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2026/01/28 11:52 a.m.•37 views

CVE-2025-59891

CVE-2025-59891 is a CSRF vulnerability affecting Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. The root cause is lack of proper CSRF token handling, enabling an authenticated attacker to coerce other users to perform actions in the app (e.g., via POST to /setup_login?...

8.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder