783 matches found
CVE-2021-3332
WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...
CVE-2021-3332
The CVE-2021-3332 vulnerability affects the WordPress WPS Hide Login plugin (versions up to 1.6.1). It enables remote attackers to bypass the login-page protection mechanism via the post_password field. Impact is a bypass of protection, with no exploitation details provided in the documents beyon...
WPS Hide Login 安全漏洞
A security vulnerability exists in WPS Hide Login 1.6.1 that allows remote attackers to bypass the protection mechanism via a post password...
Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs
Researchers have demonstrated a novel class of attacks that could allow a bad actor to potentially circumvent existing countermeasures and break the integrity protection of digitally signed PDF documents. Called "Shadow attacks" by academics from Ruhr-University Bochum, the technique uses the...
Opencast Access Control Error Vulnerability
Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. An Access Control Error vulnerability exists in Opencast. The vulnerability stems from allowing the distribution of interludes with strict access rules wi...
Microsoft Dynamics 365 (on-premises) Update 2.26
None None...
ExecuteAssembly - Load/Inject .NET Assemblies
ExecuteAssembly is an alternative of CS execute-assembly, built with C/C++ and it can be used to Load/Inject .NET assemblies by; reusing the host spawnto process loaded CLR Modules/AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI,...
WordPress WPS Hide Login plugin <= 1.6.1 - Login Page Protection Bypass vulnerability
Login Page Protection Bypass vulnerability discovered by Sebastian Schmitt in WordPress WPS Hide Login plugin versions = 1.6.1. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.7...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
Hardcoded credentials
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The CVE-2021-3337 issue affects the MyBB plugin “Hide-Thread-Content” (through 2021-01-27). The vulnerability allows remote attackers to bypass content-reading restrictions by clicking the reply or quote option in the postbit, leading to information disclosure. Affected component is the Hide-Thre...
MyBB Hide-Thread-Content plugin security vulnerability
MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A security vulnerability exists in the MyBB Hide-Thread-Content plugin through 2021-01-27, which originates fr...
CVE-2020-8139
A missing access control check in Nextcloud Server 18.0.1, 17.0.4, and 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL...
CVE-2020-8139
CVE-2020-8139 affects Nextcloud Server versions older than 18.0.1, 17.0.4 and 16.0.9, where a missing access control check allows hide-download shares to be downloaded when the URL is appended with /download. Connected documents confirm this is a remote access control vulnerability with potential...
CVE-2020-8139
A missing access control check in Nextcloud Server 18.0.1, 17.0.4, and 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL...
Nextcloud: "Secure View" aka "Hide Download" can be bypassed easily
The mid-2019 announced feature "Secure view" https://nextcloud.com/blog/secure-view-prevent-your-shared-files-from-getting-downloaded/ allows for hiding the Download button on public shares. Even though the announcement admits that there are always workarounds out there to get hands on the file...
