共收录 791 条相关情报。
← 返回所有主题CVE-2026-55593
Froxlor is open source server administration software. Prior to 2.3.8, the standalone lib/ajax.php entry point bypasses
CVE-2026-55593
## Summary The Froxlor AJAX endpoint (`lib/ajax.php`) is missing Cross-Site Request Forgery (CSRF) protection. While th
CVE-2026-68923
MobSF is a mobile application security testing tool used. Prior to 4.5.1, mobsf/MobSF/settings.py places django.middlewa
CVE-2026-45129
MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Recovery Codes module does not validate reque
CVE-2026-45128
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate reques
CVE-2026-45127
MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain request
CVE-2026-45126
MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate t
CVE-2026-45119
MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate cer
CVE-2026-66635
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
CVE-2026-75151
A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vu
CVE-2026-19650
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
CVE-2026-17608
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forg
CVE-2026-18165
@fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin val
CVE-2026-67366
Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state chan
CVE-2026-67366
CVE-2026-67366 是 Joomla 扩展 iCagenda 中的一个跨站请求伪造（CSRF）漏洞。iCagenda 是 Joomla 平台上常用的活动管理与注册插件。该漏洞影响 iCagenda 2.0.0-4.0.11 之前的
CVE-2026-57469
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuratio
CVE-2026-73847
Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant exec
CVE-2026-57469
Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuratio
CVE-2025-10308
The Astro Booking Engine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc