22 matches found
Stripe: CSRF token validation system is disabled on Stripe Dashboard
@dsharad discovered that due to a code change deployed on 2/14/2022, Cross Site Request Forgery CSRF protection was disabled in the Stripe Dashboard. This could have allowed an attacker to trick a victim user to visit a malicious website and cause limited changes to the victim’s Stripe account su...
7.2AI score
SaveExploits0
CVE-2005-1556: Undefined Security Weakness
Gamespy cd-key validation system allows remote attackers to cause a denial of service cd-key already in use by capturing and replaying a cd-key authorization session...
5CVSS5.8AI score0.01699EPSS
SaveExploits1References1
20