CVE-2020-13186

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

Cross site request forgery (csrf)

An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link...

CVE-2021-3130

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible...

CVE-2019-16070

A number of stored Cross-site Scripting XSS vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject malicious code directly into the application through web application form inputs...

Tutor LMS < 1.5.3 - Cross-Site Request Forgery (CSRF)

Tutor LMS WordPress plugin is vulnerable to Cross-Site Request Forgery CSRF attacks. As the requests for the approval and blocking of instructors are sent using the GET method, the CSRF attack to approve an attacker-controlled instructor account can be performed by having the admin visit...

File Upload Vulnerability in Rubik's Cube Web Table

Rubik's Web Form is a web browser based general information management software. A file upload vulnerability exists in Rubik's Web Forms, which can be exploited by attackers to gain server privileges...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

DEBIAN-CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

Technical details about CVE-2012-3543 are not publicly provided in the supplied documents. Monitor for updates from vendors or vulnerability trackers for affected software, impact, and fixed versions.

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

CVE-2012-3543

mono 2.10.x ASP.NET Web Form Hash collision DoS...

ARI Quiz Component SQL Injection Vulnerability in Joomla!

Joomla! is a Content Management System CMS. A SQL injection vulnerability exists in the ARI Quiz component of Joomla! An attacker can trick the server into executing malicious SQL commands by inserting SQL commands into the query string of a web form submission or input domain or page request...

. NET advanced code audit, the eleventh classes LosFormatter to deserialize vulnerability-vulnerability warning-the black bar safety net

LosFormatter is generally used to serialize and deserialize the Web form page's view statethe ViewState, if you want to put the ViewState through a database or other persistence devices to maintain, it requires the use of specific LosFormatter class to serialize/deserialized. It is encapsulated i...

Coship Wireless Router 4.0.0.x/5.0.0.x - WiFi Password Reset

Exploit Title: Coship Wireless Router – Wireless SSID Unauthenticated Password Reset Date: 07.02.2019 Exploit Author: Adithyan AK Vendor Homepage: http://en.coship.com/ Category: Hardware WiFi Router Affected Versions : Coship RT3052 - 4.0.0.48, Coship RT3050 - 4.0.0.40, Coship WM3300 - 5.0.0.54,...

AirTies Air5341 Modem 1.0.0.12 Cross Site Request Forgery

Exploit Title: AirTies Air5341 1.0.0.12 Modem CSRF Exploit & PoC Version: AirTies Modem Firmware 1.0.0.12 Tested on: Windows 10 x64 CVE : CVE-2019-6967 Author : Ali Can GAPnA1/4llA1/4...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

Moxa NPort W2x50A Operating System Command Injection Vulnerability

Moxa NPort W2x50A is a Moxa serial communication server for connecting industrial serial devices to the network. An operating system command injection vulnerability exists in the web server ping feature in Moxa NPort W2x50A products with firmware prior to version 2.2 Build18082311. An attacker ca...

Component AlphaIndex Dictionaries SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component AlphaIndex Dictionaries. The vulnerability is caused by an attacker inserting SQL commands into the query string of a w...

Component Music Collection SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Music Collection component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submissio...