783 matches found
CVE-2022-3489
WP Hide WordPress plugin (versions 0.0.0–0.0.2) is affected by an unauthenticated settings update vulnerability in the custom_wpadmin_slug feature. The root cause is missing authorization and CSRF checks on the update endpoint (Settings update for the slug), enabling unauthenticated attackers to ...
DEBIAN-CVE-2022-3660
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
WP Hide <= 0.0.2 - Unauthenticated Settings Update
The plugin does not have authorisation and CSRF checks in place when updating the customwpadminslug settings, allowing unauthenticated attackers to update it with a crafted request curl -X POST --data "customwpadminslug=attacker-value" https://example.com/wp-admin/admin-post.php Settings is...
CVE-2022-2538
The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting...
CVE-2022-2538
The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting...
CVE-2022-2538
The CVE-2022-2538 entry corresponds to the WP Hide & Security Enhancer WordPress plugin. Affected: versions prior to 1.8. Root cause: the plugin does not escape a parameter before outputting it back in an attribute of a backend page, producing a Reflected Cross‑Site Scripting (XSS) vulnerability....
WordPress plugin WP Hide & Security Enhancer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress WPS Hide Login Plugin < 1.9.1 Incorrect Authorization Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpserveur:wpshidelogin"; ifdescription...
WordPress WPS Hide Login Plugin <= 1.6.1 Improper Authentication Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpserveur:wpshidelogin"; ifdescription...
MAL-2022-3626 Malicious code in hide-pay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a3a3328e941452cee1af7de1eb20fd3dcb4950ca894c00008909073fe57e96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hide-pay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a3a3328e941452cee1af7de1eb20fd3dcb4950ca894c00008909073fe57e96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-8139
A missing access control check in Nextcloud Server 18.0.1, 17.0.4, and 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL...
DEBIAN-CVE-2022-0804
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page...
UBUNTU-CVE-2022-0802
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page...
Casper-Fs - A Custom Hidden Linux Kernel Module Generator. Each Module Works In The File System To Protect And Hide Secret Files
Casper-fs is a custom Linux Kernel Module generator to work with resources to protect or hide a custom list of files. Each LKM has resources to protect or hide files following a custom list in the YAML rule file. Yes, not even the root has permission to see the files or make actions like edit and...
North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...
WordPress Hide Shipping Method For WooCommerce plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Hide Shipping Method For WooCommerce plugin versions = 1.3.0. Solution Update the WordPress Hide Shipping Method For WooCommerce plugin to the latest available version at least 1.3.1...
UBUNTU-CVE-2022-0118
Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox URL bar via a crafted HTML page...
Authentication Bypass
onionsharecli is vulnerable to Authentication Bypass. The vulnerability exists in the upload function in receivemode.py file, allowing authorized users to spoof their leave event and hide the existence...