共收录 791 条相关情报。
← 返回所有主题CVE-2026-82911
Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero
CVE-2026-85547
A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disable
CVE-2026-85546
MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOr
CVE-2026-85547
A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disable
CVE-2026-85546
MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOr
CVE-2026-49455
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions
CVE-2026-49455
Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions
CVE-2026-85236
A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed
CVE-2026-85236
A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed
CVE-2026-85162
AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin/Live/saveLive.php that lac
CVE-2026-85161
AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.php that lacks forbi
CVE-2026-84663
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and ear
CVE-2026-84649
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included
CVE-2026-53649
Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1
CVE-2026-53649
Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1
CVE-2026-84663
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and ear
CVE-2026-84649
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included
CVE-2026-8151
The Simple Membership MailChimp Integration WordPress plugin before 1.9.8 does not have CSRF checks in its settings page
CVE-2026-84770
Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.
CVE-2026-84764
Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.