WordPress wp-social-bookmarking-light plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-social-bookmarking-light is a social sharing plugin that is used in it. A cross-site request forgery vulnerability exists in...

Cross site request forgery (csrf)

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...

CVE-2015-9433

The wp-social-bookmarking-light plugin for WordPress is affected by a CSRF leading to XSS via configuration parameters in wp-admin/options-general.php?page=wp-social-bookmarking-light/modules/admin.php. This vulnerability exists in versions prior to 1.7.10. Root cause: CSRF enables insertion of m...

CVE-2015-9433

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...

PT-2019-7392

Name of the Vulnerable Software and Affected Versions wp-social-bookmarking-light plugin versions prior to 1.7.10 Description The issue concerns a CSRF vulnerability that can lead to XSS, specifically via configuration parameters for social media platforms such as Tumblr, Twitter, and Facebook...

CVE-2015-9433: Cross-Site Request Forgery (CSRF)

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...

XSS vulnerability in a component of the HadSky Light Forum system

HadSky Light Forum is a newborn original PHP MySQL open source system , the main goal is to achieve light , fast , simple , full , 100% original open source system . HadSky Light Forum system somewhere in the component there is an XSS vulnerability , attackers can exploit the vulnerability to...

File Upload Vulnerability in HadSky Light Forum System

HadSky Light Forum System is a free and open forum system for individual users. A file upload vulnerability exists in the HadSky Light Forum System, which can be exploited by an attacker to gain control of the web server...

CVE-2019-6165

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

Privilege escalation

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

CVE-2019-6165

A DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that could allow privilege escalation. Lenovo has ended support for PaperDisplay Hotkey software as the Night light feature introduced in Windows 10 Build 1703 provides similar features...

CVE-2019-6165

CVE-2019-6165 concerns a DLL search path vulnerability in Lenovo’s PaperDisplay Hotkey Service v1.2.0.8 and earlier that could enable privilege escalation. Root cause: improper DLL search path handling in PaperDisplay Hotkey Service. Impact: privilege escalation possible on affected systems; Leno...

PT-2019-17996 · Lenovo +1 · Paperdisplay Hotkey Service +1

Name of the Vulnerable Software and Affected Versions: PaperDisplay Hotkey Service version 1.2.0.8 Description: A DLL search path issue was reported that could allow privilege escalation. The software's functionality is superseded by the Night light feature in Windows 10 Build 1703 and later...

PaperDisplay Hotkey Vulnerability - Lenovo Support US

No description provided...

Arduino has an unspecified vulnerability

Arduino is a microcontroller board for the Arduino project. A security vulnerability exists in the embedded system in versions prior to Arduino Rev3. A remote attacker could exploit the vulnerability to send data to LEDs...

Splunk Enterprise 6.0.x < 6.0.15, 6.1.x < 6.1.14, 6.2.x < 6.2.14, 6.3.x < 6.3.12, 6.4.x < 6.4.9, 6.5.x < 6.5.5 or Splunk Light < 6.6.0 Persistent XSS

According to its self-reported version number, the version of Splunk running on the remote web server is Splunk Enterprise 6.0.x prior to 6.0.15, 6.1.x prior to 6.1.14, 6.2.x prior to 6.2.14, 6.3.x prior to 6.3.12, 6.4.x prior to 6.4.9, 6.5.x prior to 6.5.5 or Splunk Light prior to 6.6.0. It is,...

Facing the cold chills

Have you ever felt the cold chill in your spine when the “fix engine” light comes on in your car? How about when one of your children turns pale and gets their first fever? It’s a feeling of helplessness and concern regarding what could be wrong. Then there’s the feeling of relief that comes with...

Resetting Your GE Smart Light Bulb

If you need to reset the software in your GE smart light bulb -- firmware version 2.8 or later -- just follow these easy instructions: Start with your bulb off for at least 5 seconds. 1. Turn on for 8 seconds 2. Turn off for 2 seconds 3. Turn on for 8 seconds 4. Turn off for 2 seconds 5. Turn on...

June 27, 2019—KB4501375 (OS Build 18362.207)

None None...

contentful-import (5.0.2-beta1), http_bouncer_client (>=1.0.1, <=1.0.3) +1 more potentially affected by unknown CVE via http-proxy-agent (2.0.0)

http-proxy-agent NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on http-proxy-agent and may be impacted: - contentful-import 5.0.2-beta1 - httpbouncerclient =1.0.1, =1.0.3 - request-light 0.2.2 Source cves: unknown CVE Source advisory:...