Search: “csrf”

37 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 155 Exploit / PoC 63 Data breach 14 Malware 12 Ransomware 10 Industry 3 Phishing & fraud 3 Advisory 3 Threat actor 2 Tools 2 Policy & legal 1 Model release 1 AI safety & security 1

SeverityAll critical 143 high 64 medium 50 low 10 info 3

Tackling cross-site request forgery (CSRF) on company websites

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2021Exploit / PoC in the wild

60

GoDaddy fixed a CSRF flaw that allows Domain takeover

Security AffairsJan 20, 21:05 UTC · Jan 20, 2015Exploit / PoC

60

Facebook paid $25,000 for CSRF exploit that leads to Account Takeover

Security AffairsFeb 17, 09:35 UTC · Feb 17, 2019Exploit / PoC

60

How to hack Facebook accounts exploiting CSRF in Oculus app

Security AffairsJan 17, 09:08 UTC · Jan 17, 2018Exploit / PoC

60

Network Attack Trends: February

Palo Alto Unit 42Jun 6, 12:33 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-25296 CVE-2021-25297 CVE-2021-25298+4 CVEs

60

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2019Exploit / PoC

60

ZDResearch Advanced Web Hacking Training 2018

The Hacker NewsSep 25, 13:16 UTC · Sep 25, 2018Exploit / PoC

60

3 flaws in StarBucks websites open its users to attacks

Security AffairsSep 21, 06:51 UTC · Sep 21, 2015Exploit / PoC

60

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

The Hacker NewsJul 28, 13:10 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-53921 CVE-2026-62948 CVE-2026-629471

60

U.S. CISA adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

Security AffairsAug 5, 18:59 UTC · Aug 5, 2025Exploit / PoC in the wildCVE-2025-20281 CVE-2025-20337 CVE-2023-2533+1 CVEs

60

Zoom Bug Allowed Snoopers Crack Private Meeting Passwords in Minutes

The Hacker NewsAug 6, 16:12 UTC · Aug 6, 2020Exploit / PoC

60

Warning: Researcher Drops phpMyAdmin Zero

The Hacker NewsSep 18, 11:08 UTC · Sep 18, 2019Exploit / PoC CVE-2019-12922

60

ICS-CERT warns for 0

Security AffairsDec 2, 14:01 UTC · Dec 2, 2017Exploit / PoC

60

A critical flaw in Twitter allows to delete payment cards

Security AffairsSep 16, 14:14 UTC · Sep 16, 2014Exploit / PoC

60

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Exploit / PoC in the wildCVE-2026-48939 CVE-2026-56291 CVE-2025-6389+9 CVEs

60

U.S. CISA adds Trend Micro Apex One and Langflow to its Known Exploited Vulnerabilities catalog

Security AffairsMay 22, 09:13 UTC · May 22, 2026Exploit / PoC in the wildCVE-2025-34291 CVE-2026-34926

60

89% of AI-powered APIs rely on insecure authentication mechanisms

Help Net SecurityJan 30, 00:00 UTC · Jan 30, 2025Exploit / PoC

60

Cybersecurity jobs available right now: October 23, 2024

Help Net SecurityDec 16, 08:58 UTC · Dec 16, 2024Exploit / PoC

60

Critical Jenkins RCE flaw exploited in the wild. Patch now! (CVE-2024-23897)

Help Net SecurityAug 14, 08:33 UTC · Aug 14, 2024Exploit / PoC in the wildCVE-2024-23897 CVE-2024-23898

60

Researchers find decades

CyberScoopAug 8, 15:14 UTC · Aug 8, 2024Exploit / PoC in the wild

60

Microsoft announces Defender bug bounty program

Help Net SecurityNov 28, 11:04 UTC · Nov 28, 2023Exploit / PoC

60

Microsoft launched its new Microsoft Defender Bounty Program

Security AffairsNov 24, 19:49 UTC · Nov 24, 2023Exploit / PoC1

60

Mitre shared 2022 CWE Top 25 most dangerous software weaknesses

Security AffairsJun 29, 10:40 UTC · Jun 29, 2022Exploit / PoC in the wild

60

Chrome Limits Websites' Direct Access to Private Networks for Security Reasons

The Hacker NewsJan 18, 04:53 UTC · Jan 18, 2022Exploit / PoC in the wild

60

100k+ WordPress sites exposed to hack due to a bug in Real

Security AffairsApr 28, 09:03 UTC · Apr 28, 2020Exploit / PoC in the wild

60

100K+ WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack

Security AffairsApr 3, 08:50 UTC · Apr 3, 2020Exploit / PoC in the wild

60

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Security AffairsMar 31, 21:43 UTC · Mar 31, 2020Exploit / PoC in the wild

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60

Crooks are attempting to take over tens of thousands of WordPress sites

Security AffairsFeb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild

60

Hackers are actively exploiting a Zero

Security AffairsFeb 20, 06:31 UTC · Feb 20, 2020Exploit / PoC in the wild

60

A Comprehensive Guide On How to Protect Your Websites From Hackers

The Hacker NewsOct 17, 08:30 UTC · Oct 17, 2019Exploit / PoC

60

Pre-Installed Software Flaw Exposes Most Dell Computers to Remote Hacking

The Hacker NewsMay 2, 10:13 UTC · May 2, 2019Exploit / PoC CVE-2019-3719 CVE-2019-3718

60

Microsoft plugs 56 vulns, including Office flaw exploited in attacks

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2018Exploit / PoC in the wildCVE-2018-0802 CVE-2017-11882 CVE-2018-0786+3 CVEs

60

A security expert found a 0

Security AffairsDec 22, 21:55 UTC · Dec 22, 2016Exploit / PoC

60

Hacking 4G USB modems and SIM Card via SMS

Security AffairsDec 31, 13:37 UTC · Dec 31, 2014Exploit / PoC

60