WordPress Curtain plugin <= 1.0.1 - Unauthenticated Maintenance Mode Switch vulnerability

Unauthenticated Maintenance Mode Switch vulnerability discovered by Hassan Khan Yusufzai Splint3r7 in WordPress Curtain plugin versions = 1.0.1. Solution Update the WordPress Curtain plugin to the latest available version at least 1.0.2...

WordPress Curtain 1.0.2 Plugin - Cross-site Request Forgery Vulnerability

Exploit Title: WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery CSRF Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/curtain/ Version: 1.0.2 Tested on: Firefox Summary: Cross site forgery vulnerability has been identified in curtain...

WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery (CSRF)

Exploit Title: WordPress Plugin Curtain 1.0.2 - Cross-site Request Forgery CSRF Date: 24-03-2022 Exploit Author: Hassan Khan Yusufzai - Splint3r7 Vendor Homepage: https://wordpress.org/plugins/curtain/ Version: 1.0.2 Tested on: Firefox Summary: Cross site forgery vulnerability has been identified...

Defending online anonymity and speech with Eva Galperin: Lock and Code S02E03

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we talk to Eva Galperin, director of cybersecurity for Electronic Frontier Foundation, about the importance of protecting online anonymity and speech. In January, the New York Times expose...

Curtain (Windows client) has a dll hijacking vulnerability

Curtain is a mind mapping software for computers. A dll hijacking vulnerability exists in Curtain Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Command Execution Vulnerability in Curtain Client

Curtain Client is a mind mapping software. A command execution vulnerability exists in the Curtain Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

classic-curtain.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-713906 Description| Value ---|--- Affected Website:| classic-curtain.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

curtain-shops.com XSS vulnerability

Open Bug Bounty ID: OBB-555564 Description| Value ---|--- Affected Website:| curtain-shops.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

imperialfastener.com XSS vulnerability

Vulnerable URL: http://www.imperialfastener.com/curtainpatterndetail.php?pattern=1"...

CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M6.0 software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The...