Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
CVE-2026-107809
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-manage
#cwe-352
共收录 791 条相关情报。
← 返回所有主题Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Request Forgery.This issue affects Dashboard Notes: from n/a th...
CVE-2026-62026
Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Reques
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged...
CVE-2026-85348
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its setting
Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image f...
CVE-2026-96671
Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote...
CVE-2026-107831
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-c
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking anti-CSR...
CVE-2026-107831
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-c
Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions
CVE-2026-107831
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-c
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0...
CVE-2026-78388
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cro
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to ...
CVE-2026-78388
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cro
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin poli...
CVE-2026-106216
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacke
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Cli...
CVE-2026-105783
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.1
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the sha...
CVE-2026-102778
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extens
Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the buttons of the back-end lis...
CVE-2026-102776
Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension <
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting...
CVE-2026-104407
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows...
CVE-2026-105292
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth ...
CVE-2026-105292
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
CVE-2026-74802
**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross...
CVE-2026-39718
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This