CSRF - CVE CyberSecurity Database News (Page 60)

Oct 31, 2022 CSRF Exploit PHP Processwire

CVE-2022-40488 - How ProcessWire v3..200’s CSRF Flaw Can Expose Your Site (With an Example Exploit)

ProcessWire, a popular open source CMS (Content Management System) written in PHP, aims to make website development easy, secure, and robust. However, security vulnerabilities sometimes

Oct 28, 2022 CSRF WordPress Exploit demonisblack demon image annotation

CVE-2022-2864 - How a Missing Nonce in Demon Image Annotation Plugin Opened Thousands of WordPress Sites to CSRF

If you use WordPress to host your website, plugins are a double-edged sword: they can boost your site's functionality, but with the wrong

Oct 28, 2022 CSRF XSS Exploit PHP Rukovoditel

CVE-2022-43169 - Exploiting Rukovoditel v3.2.1 Users Groups Stored XSS—Step-by-Step Guide

Stored Cross-Site Scripting (XSS) vulnerabilities are among the scariest security bugs for collaborative web platforms. CVE-2022-43169 is a powerful example, discovered in Rukovoditel v3.2.

Oct 28, 2022 CSRF SQL

CVE-2022-3731 A vulnerability has been found in seccome Ehoney and classified as critical. The manipulation of the argument Payload leads to sql injection.

The vulnerability can be exploited via web requests and is detected by the rule SEH_SQL_INJECTION. A Proof of Concept (PoC) has been provided

Oct 28, 2022 CSRF API Exploit Arubanetworks

CVE-2022-37915 - Critical RCE in Aruba EdgeConnect Enterprise Orchestrator—How an Attacker Can Totally Take Over Your Network

In the ever-growing threat landscape, network management interfaces are prime targets for attackers. If you run Aruba EdgeConnect Enterprise Orchestrator, especially a fresh 9.1.