CSRF - CVE CyberSecurity Database News (Page 45)

Nov 22, 2022 RCE CSRF API Exploit Java Redhat

CVE-2022-4116 - Exploiting Quarkus Dev UI Config Editor for Drive-By Localhost RCE

--- Introduction In late 2022, security researchers uncovered a critical vulnerability in Quarkus, a popular Java framework for building cloud-native applications. Assigned as CVE-2022-4116, this

Nov 22, 2022 CSRF WordPress All In One WP Security & Firewall Team All-In-One Security (AIOS) – Security and Firewall (WordPress plugin)

CVE-2022-44737 - Multiple Cross-Site Request Forgery (CSRF) Flaws in All-In-One Security (AIOS) – Security and Firewall Plugin <= 5.1. on WordPress

--- Intro: What is CVE-2022-44737? CVE-2022-44737 is a security vulnerability found in the popular All-In-One Security (AIOS) – Security and Firewall WordPress plugin, affecting versions up

Nov 21, 2022 CSRF Exploit Optilinknetwork

CVE-2020-23582: Explaining the Cross-Site Request Forgery Vulnerability in Optilink OP-XT710N and How to Exploit it

A recent vulnerability, identified as CVE-2020-23582, has emerged in the web administration interface of the Optilink OP-XT71000N version V2.2, which could allow a remote

Nov 21, 2022 CSRF WordPress

CVE-2022-1581 WP-Polls pluginprioritized getting visitor IP over PHP's REMOTE_ADDR, which made it possible to bypass IP-based limitations to vote in certain situations.

This means, for example, that a malicious actor could hack an online poll and change the vote for a certain country, or for a certain

Nov 21, 2022 CSRF Exploit PHP Ask me

CVE-2022-3750: CSRF vulnerability in leading web platform enables unauthorized post deletion without nonce or confirmation prompting

A recent addition to the CVE database, CVE-2022-3750, refers to a critical CSRF (Cross-Site Request Forgery) vulnerability discovered in a leading web platform. This vulnerability