PT-2023-23839 · WordPress · Arshid Easy Hide Login

Name of the Vulnerable Software and Affected Versions: Arshid Easy Hide Login plugin versions = 1.0.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions = 1.0.7, update to a versio...

WordPress Hide My WP Ghost Plugin <= 5.0.25 is vulnerable to Bypass Vulnerability

Software Hide My WP Ghost Type Plugin Vulnerable versions = 5.0.25 Fixed in 5.0.26 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-34001 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5c19175f6894 Credits konagash Required...

Hide "Virtual Disk status" icon from System tray on the endpoints

Disable the vDisk status icon from being displayed within the system tray on the endpoints after launching ICA sessions against PVS provisioned VDAs...

The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.

The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...

The vulnerability of the EMUI operating system of HarmonyOS, related to bypassing authentication through spoofing, allows attackers to hide application icons on the desktop in order to prevent their deletion.

The vulnerability of the EMUI operating system of HarmonyOS relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to conceal application icons on the desktop, thereby preventing their deletion...

CVE-2023-21191

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21191

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Google Pixel 输入验证错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in setInputMethodWithSubtypeIdLocked in InputMethodManagerService.java, which may bypass notifications to hide preferences due to improper input validation, which coul...

CVE-2023-34167

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2023-34160

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2023-34158

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled...

CVE-2020-36710

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2...

Design/Logic Flaw

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2...

CVE-2020-36710 WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure

The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the login page making it possible for unauthenticated attackers to brute force credentials on sites in versions up to, and including, 1.5.4.2...

CVE-2020-36710

The CVE concerns the WordPress WPS Hide Login plugin. Affected: WPS Hide Login for WordPress, versions up to and including 1.5.4.2. Issue: login page disclosure allows unauthenticated attackers to brute force credentials even when the plugin is configured to hide the login page. Root cause: discl...

WordPress Plugin WPS Hide Login 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-11852 · WordPress · Wps Hide Login

Name of the Vulnerable Software and Affected Versions: WPS Hide Login plugin for WordPress versions up to, and including, 1.5.4.2 Description: The issue allows unauthenticated attackers to brute force credentials on sites, even when the plugin settings are set to hide the login page. This enables...

WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Hide Post Type Plugin Vulnerable versions = 2.0.10 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34378 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID aae5d2069aaf Credits István Márton Required...

PT-2023-3367 · Huawei · Huawei Desktop

Name of the Vulnerable Software and Affected Versions: Huawei desktop affected versions not specified Description: The issue is related to spoofing trustlists, which can be exploited to hide app icons on the desktop, preventing them from being uninstalled. This is achieved by bypassing...

PUB-A-269738057

In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...