Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence Serial Gateway devices with software 1.01.42 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728...

CVE-2015-4257

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...

Apple MAC OS X User Authentication Handling Elevation of Privilege Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X Check User Authentication allows unmanaged users to exploit a vulnerability to gain administrative privileges without authentication...

Fiyo CMS 2.0_1.9.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

My Wifi Router buffer overflow

Buffer overflow on user authentication...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Product & Service Introduction: =============================== SupportCenter Plus is a web-based customer support software that lets...

[RT-SA-2015-004] Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery

Advisory: Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery During a penetration test, RedTeam Pentesting discovered a vulnerability in the management web interface of an Alcatel-Lucent OmniSwitch 6450. The management web interface has no protection against cross-site request...

Alcatel-Lucent OmniSwitch Web Interface Cross Site Request Forgery Vulnerability

Vulnerability in the management web interface of an Alcatel-Lucent OmniSwitch 6450. The management web interface has no protection against cross-site request forgery attacks. This allows specially crafted web pages to change the switch configuration and create users, if an administrator accesses...

TickFa 1.x SQL Injection

/ + Author: Mohammad Reza Espargham + Title: TickFa 1.x - SQL Injection Vulnerability + Date: 26-04-2015 + Vendor: http://tickfa.aftab.cc/ + SoftWare Link : http://tickfa.aftab.cc/dl/tickfa.zip + Type: WebAPP + Tested on: KaliLinux Debian / curl 7.35.0 + GHDB : intext:"تیکت برای بخش مورد نظر ایجا...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0218

Cross-site request forgery CSRF vulnerability in auth/shibboleth/logout.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout...

PT-2015-4855 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco MediaSense 10.51 and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728...

[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

Legend Perl IRC Bot - Remote Code Execution

legendrce.py Legend Perl IRC Bot Remote Code Execution PoC author: Jay Turla @shipcod3 description: This is a RCE PoC for Legend Bot which has been used in the Shellshock spam October 2014. reference:...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

CVE-2015-0704

CVE-2015-0704 affects Cisco Unified MeetingPlace Server (8.6(1.9)) with CSRF vulnerabilities in API features that allow remote attackers to hijack user authentication. The root cause is insufficient CSRF protections in multiple-state-changing URL API functionalities. Impact, as documented, is use...

CVE-2015-3370

Cross-site request forgery CSRF vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authentication of users with the "nodeinvitecanmanageinvite" permission for requests that re-enable node invitations via unspecified vectors...