WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page. id: CVE-2024-6289 info: name: WPS Hide Login 1.9.16.4 - Hidden Login Page Disclosure autho...

MINI-6289-GRGR-GG7V

Bulletin has no description...

MINI-3RVX-6289-4R32

Bulletin has no description...

CGA-6289-CM83-C6G6

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2016-6289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the virtualfileex function in TSRM/tsrmvirtualcwd.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers ...

CVE-2024-6289

creationtimestamp| type| source ---|---|--- 2024-07-15 09:19:05+00:00| seen| https://t.me/cvedetector/841...

CVE-2024-6289 WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page...

CVE-2024-6289

The CVE-2024-6289 entry concerns the WordPress plugin WPS Hide Login (versions prior to 1.9.16.4). The root cause is improper handling of redirects via the auth_redirect function, allowing an unauthenticated visitor to access the hidden login page. Affected component: the plugin’s login/page redi...

CVE-2024-6289 WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure

The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page...

WordPress WPS Hide Login Plugin < 1.9.16.4 is vulnerable to Bypass Vulnerability

Software WPS Hide Login Type Plugin Vulnerable versions 1.9.16.4 Fixed in 1.9.16.4 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-6289 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f53af1c9d210 Credits Juan Pablo Gomez Postigo Required...

CVE-2023-6289

creationtimestamp| type| source ---|---|--- 2023-12-20 08:41:46+00:00| seen| https://t.me/ctinow/156799 2023-12-20 15:44:28+00:00| seen| https://t.me/arpsyndicate/2047 2023-12-21 23:16:53+00:00| seen| https://t.me/ctinow/158042 2024-11-17 03:14:18+00:00| published-proof-of-concept|...

CVE-2023-6289

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

CVE-2023-6289

CVE-2023-6289 affects the WordPress plugin Swift Performance Lite up to version 2.3.6.14. Root cause: missing authorization check on an admin-ajax exported function (luv-action export) via admin_init, allowing unauthenticated retrieval of plugin settings that may include Cloudflare API tokens. Im...

CVE-2023-6289 Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export

The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens...

WordPress Swift Performance Lite Plugin <= 2.3.6.14 is vulnerable to Broken Access Control

Software Swift Performance Lite Type Plugin Vulnerable versions = 2.3.6.14 Fixed in 2.3.6.15 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6289 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4c96690d3565 Credits Krzysztof Zając...

Ubuntu: Security Advisory (USN-6289-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K34985231: PHP vulnerabilities CVE-2016-6288 and CVE-2016-6289

Security Advisory Description CVE-2016-6288 The phpurlparseex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via vectors involving the smartstr data type. CVE-2016-6289 Integer...

Mageia: Security Advisory (MGASA-2016-0267)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...