CSRF - CVE CyberSecurity Database News (Page 5)

Feb 7, 2025 CSRF WordPress API

CVE-2025-25103 - Cross-Site Request Forgery (CSRF) in bnielsen Indeed API (up to .5)

Cross Site Request Forgery (CSRF) continues to make the headlines, and now it’s bnielsen’s Indeed API plugin’s turn. If you’re running

Feb 6, 2025 CSRF XSS WordPress Exploit

CVE-2025-0522 - How a Dangerous CSRF and XSS Combo Threatens LikeBot Plugin for WordPress

Published: June 2024 *By: SecureWP Insights Team* The world of WordPress security is never dull, and now, a new vulnerability has surfaced that could endanger

Feb 3, 2025 CSRF Exploit

CVE-2024-56903 - How a Simple HTTP Trick Breaks Security in GeoVision GV-ASWeb (<=6.1.1.)

--- Introduction In the world of security, sometimes the biggest problems come from the smallest details. That’s exactly the case with CVE-2024-56903 – a

Jan 31, 2025 CSRF Exploit JSON Web Token OAuth Google

CVE-2024-1211 - GitLab JWT OmniAuth CSRF Vulnerability Explored

If your organization uses GitLab for source control and has enabled JWT as an OmniAuth provider, you may be at risk of a newly disclosed

Jan 14, 2025 CSRF Exploit

CVE-2024-47100 - CSRF in Siemens SIMATIC S7-120/SIPLUS S7-120 PLCs — Changing CPU Mode with One Click

CVE-2024-47100 is a recently disclosed vulnerability affecting a wide range of Siemens SIMATIC S7-120 and SIPLUS S7-120 PLCs. The bug exists