Search: “csrf”

143 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 155 Exploit / PoC 63 Data breach 14 Malware 12 Ransomware 10 Phishing & fraud 3 Industry 3 Advisory 3 Threat actor 2 Tools 2 Policy & legal 1

SeverityAll critical 143 high 64 medium 49 low 10 info 2

Case Study: Are CSRF Tokens Sufficient in Preventing CSRF Attacks?

The Hacker NewsApr 3, 10:49 UTC · Apr 3, 2025Data breach

60

Tackling cross-site request forgery (CSRF) on company websites

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2021Exploit / PoC in the wild

60

GoDaddy fixed a CSRF flaw that allows Domain takeover

Security AffairsJan 20, 21:05 UTC · Jan 20, 2015Exploit / PoC

60

Cisco fixes critical Expressway Series CSRF vulnerabilities

Security AffairsFeb 8, 08:20 UTC · Feb 8, 2024Vulnerability CVE-2024-20252 CVE-2024-20254 CVE-2024-20255

60

CSRF Vulnerability in phpMyAdmin allows attackers to perform DROP TABLE with a single click!

Security AffairsJan 2, 10:59 UTC · Jan 2, 2018Vulnerability

55

Facebook paid $25,000 for CSRF exploit that leads to Account Takeover

Security AffairsFeb 17, 09:35 UTC · Feb 17, 2019Exploit / PoC

60

How to hack Facebook accounts exploiting CSRF in Oculus app

Security AffairsJan 17, 09:08 UTC · Jan 17, 2018Exploit / PoC

60

DNS Rebinding Attack: How Malicious Websites Exploit Private Networks

Palo Alto Unit 42Jun 6, 01:33 UTC · Jun 6, 2024Data breach

60

Popular Page Builder WordPress plugin fixes critical issues. Update it now!

Security AffairsMay 12, 15:37 UTC · May 12, 2020Vulnerability

55

Network Attack Trends: February

Palo Alto Unit 42Jun 6, 12:33 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-25296 CVE-2021-25297 CVE-2021-25298+4 CVEs

60

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Critical flaws in NextGen Gallery WordPress plugin still impact over 500K installs

Security AffairsFeb 9, 15:18 UTC · Feb 9, 2021Vulnerability CVE-2020-35942

60

TikTok Patches Bugs Enabling One

Infosecurity MagazineNov 24, 10:30 UTC · Nov 24, 2020Vulnerability

55

Amazon Alexa Bugs Could've Let Hackers Install Malicious Skills Remotely

The Hacker NewsAug 24, 08:15 UTC · Aug 24, 2020Vulnerability

55

MAGENTO 2.0.16 and 2.1.9 security update fixes critical flaw in the platform

Security AffairsApr 1, 21:06 UTC · Apr 1, 2018Vulnerability

55

Claude finds 353 zero

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Data breach

60

Legacy web forms are the weakest link in government data security

CyberScoopNov 21, 11:00 UTC · Nov 21, 2025Data breach

60

New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands

The Hacker NewsOct 27, 14:31 UTC · Oct 27, 2025Vulnerability in the wild

60

Jenkins patched a critical RCE flaw in its open source automation server

Security AffairsOct 4, 15:37 UTC · Oct 4, 2025Vulnerability CVE-2017-1000353 CVE-2017-1000354 CVE-2017-1000355

60

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities

Cisco TalosOct 16, 15:05 UTC · Oct 16, 2023Vulnerability in the wildCVE-2023-20198 CVE-2023-20273 CVE-2021-14351

60

OWASP Top 10 ranking has a new leader after ten years

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability

55

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Cisco addresses High-Severity flaws in IP Phone 8800 and 7800 series

Security AffairsMar 22, 14:58 UTC · Mar 22, 2019Vulnerability CVE-2019-1716 CVE-2019-1766 CVE-2019-1763+2 CVEs

60

New WordPress Flaw Lets Unauthenticated Remote Attackers Hack Sites

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2019Vulnerability

55

5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2019Exploit / PoC

60

ZDResearch Advanced Web Hacking Training 2018

The Hacker NewsSep 25, 13:16 UTC · Sep 25, 2018Exploit / PoC

60

Critical Flaw Reported In phpMyAdmin Lets Attackers Damage Databases

The Hacker NewsJan 2, 18:35 UTC · Jan 2, 2018Vulnerability

55

Drupal version 8.2.7 address multiple vulnerabilities in the current version of the popular CMS

Security AffairsMar 16, 15:01 UTC · Mar 16, 2017Vulnerability CVE-2017-6377 CVE-2017-6379 CVE-2017-6381

60

3 flaws in StarBucks websites open its users to attacks

Security AffairsSep 21, 06:51 UTC · Sep 21, 2015Exploit / PoC

60

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers

Help Net SecurityAug 5, 00:00 UTC · Aug 5, 2026Vulnerability CVE-2026-319861

60

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

The Hacker NewsJul 28, 13:10 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-53921 CVE-2026-62948 CVE-2026-629471

60

Anthropic MCP Inspector: CVE-2025

Recorded FutureOct 14, 00:00 UTC · Oct 14, 2025Vulnerability in the wildCVE-2025-49596

60

U.S. CISA adds Cisco ISE and PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog

Security AffairsAug 5, 18:59 UTC · Aug 5, 2025Exploit / PoC in the wildCVE-2025-20281 CVE-2025-20337 CVE-2023-2533+1 CVEs

60

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide

The Hacker NewsJul 29, 04:20 UTC · Jul 29, 2025Vulnerability CVE-2025-3936 CVE-2025-3937 CVE-2025-3938+6 CVEs

60

Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits

The Hacker NewsJul 4, 09:23 UTC · Jul 4, 2025Vulnerability CVE-2025-49596

60

File Transfer Threats: Risk Factors and How Network Traffic Visibility Can Help

Palo Alto Unit 42Jun 6, 12:43 UTC · Jun 6, 2024Vulnerability CVE-2021-24144 CVE-2021-24142 CVE-2021-25277+7 CVEs

60

Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

The Hacker NewsMay 29, 12:58 UTC · May 29, 2024Vulnerability CVE-2024-20252 CVE-2024-20254 CVE-2024-20255+9 CVEs

60

New Microsoft Azure Vulnerability Uncovered — EmojiDeploy for RCE Attacks

The Hacker NewsJan 19, 16:17 UTC · Jan 19, 2023Vulnerability

55

Critical Microsoft Azure RCE flaw impacted multiple services

Security AffairsJan 19, 16:02 UTC · Jan 19, 2023Vulnerability

55

Experts warn of attacks exploiting WordPress gift card plugin

Security AffairsDec 25, 19:42 UTC · Dec 25, 2022Vulnerability CVE-2022-45359

60