iSpeech
A partial blind cross site request forgery (CSRF) vulnerability exists in perfSONAR versions 4.x through 4.4.5 within the /perfsonar-graphs/ test results page. Parameters and values can be injected/passed via the URL parameter, forcing the client to connect unknowingly in the background to other sites via transparent XMLHTTPRequests. This partial blind CSRF bypasses the built-in whitelisting function in perfSONAR.
Source link
Event Management 1.0 SQL Injection – Torchsec March 28, 2024 # Exploit Title: Event Management - SQL Injection# Application: Event… (11)Artica Proxy Unauthenticated PHP Deserialization… March 27, 2024 ### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule… (8)Siklu MultiHaul TG Series Credential Disclosure… March 29, 2024 # Exploit Title: Siklu MultiHaul TG series - unauthenticated credential… (8)
Google Sues App Developers Over Fake Crypto… April 8, 2024 Apr 08, 2024NewsroomInvestment Scam / Mobile Security Google has filed… (8)
Gloss