943 matches found
Nextcloud: "Secure View" aka "Hide Download" can be bypassed easily
The mid-2019 announced feature "Secure view" https://nextcloud.com/blog/secure-view-prevent-your-shared-files-from-getting-downloaded/ allows for hiding the Download button on public shares. Even though the announcement admits that there are always workarounds out there to get hands on the file...
WPS Hide Login < 1.5.5 - Secret Login Page Disclosure
fixed a vulnerability in version 1.5.4.2 and below that could allow an attacker to find and access the secret login page...
WordPress WPS Hide Login plugin <= 1.5.4.2 - Secret login page location disclosure vulnerability
Secret login page location disclosure vulnerability found by Jerome Bruandet in WordPress WPS Hide Login plugin versions = 1.5.4.2. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.5.5...
Easy-Hide-IP 5.0.0.3 - (EasyRedirect) Unquoted Service Path Vulnerability
Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows 7 Professional Service Pack 1 Step to discover the unquoted Service:...
CVE-2019-13717
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page...
Easy-Hide-IP 5.0.0.3 - EasyRedirect Unquoted Service Path
Easy-Hide-IP 5.0.0.3 - EasyRedirect Unquoted Service Path Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Date: 2019-11-22 Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows...
Easy-Hide-IP 5.0.0.3 Unquoted Service Path
Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Date: 2019-11-22 Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows 7 Professional Service Pack 1 Step to discover the unquot...
Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path
Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Date: 2019-11-22 Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows 7 Professional Service Pack 1 Step to discover the unquot...
WordPress wps-hide-login plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A cross-site request forgery vulnerability exists in versions of the...
Cross site request forgery (csrf)
The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...
CVE-2015-9498
CVE-2015-9498 affects the WordPress plugin wps-hide-login (versions prior to 1.1). The vulnerability is a CSRF flaw that allows exploitation during the process of saving an option value. Impact is described as CSRF with the ability to trigger unintended state changes for authenticated users; no e...
CVE-2015-9498: Cross-Site Request Forgery (CSRF)
The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value...
CVE-2019-9424
In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092...
Information disclosure
In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092...
WordPress WPS Hide Login Plugin < 1.5.3 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113495";...
WordPress wps-hide-login plugin security bypass vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...
WordPress wps-hide-login plugin security bypass vulnerability (CNVD-2019-30732)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin that is used in it. A security vulnerability exists in WordPress wps-hide-login plugi...
WordPress wps-hide-login plugin security bypass vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...
WordPress wps-hide-login plugin security bypass vulnerability (CNVD-2019-30733)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wps-hide-login is a hide-login plugin used in it. A security vulnerability exists in WordPress wps-hide-login plugin versio...
