CVE-2025-62876

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4...

CVE-2024-11142 CSRF in Gosoft Software's Proticaret E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery. This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05...

CVE-2024-13244

The Migrate Tools module in the Drupal CMS system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability (versions 0.0.0 through 6.0.2). A remote attacker could exploit this to trick an authenticated administrator into initiating a migration, though the attacker must know the specific...

firefly-iii 输入验证错误漏洞

firefly-iii is a free and open source personal finance manager. An input validation error vulnerability exists in firefly-iii versions prior to 6.0.0 that stems from improper input validation...