#csrf
-
Elementor CSRF Flaw: One Click Hands Attackers Admin Rights
A flaw in the popular WordPress site builder lets an unauthenticated attacker create a rogue administrator account once a logged-in victim clicks a crafted link.
-
Holes in NASA's AIT-GUI let attackers send commands to spacecraft without a password
Cycode researchers have disclosed a chain of vulnerabilities in the operator console of NASA/JPL's AMMOS toolkit: an anonymous attacker can send arbitrary commands to the command bus of instruments and spacecraft. The vulnerability is rated 9.4 on the CVSS scale.