WordPress Plugin bp-activity-social-share Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin = 1.1.3 versions...

CVE-2023-42544

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files...

CVE-2023-42544

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files...

Improper access control

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files...

CVE-2023-42544

CVE-2023-42544 affects Samsung Quick Share prior to 13.5.52.0. The issue is an improper access control vulnerability that allows a local attacker to access local files via the Quick Share module. Affected software: Quick Share (versions

CVE-2023-42544

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files...

CVE-2023-42544

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files...

PT-2023-28411 · Unknown · Quick Share

Name of the Vulnerable Software and Affected Versions: Quick Share versions prior to 13.5.52.0 Description: The issue is related to improper access control in Quick Share, allowing a local attacker to access local files. Recommendations: For versions prior to 13.5.52.0, update to version 13.5.52....

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 13.5.52.0, which stemmed from an improper access control vulnerability in...

Moderate: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

Malicious code in share-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba664ab24090b0fcbea9d3c7c58134f47472535eba4ff9d4a65946aa5efad8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8464 Malicious code in share-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba664ab24090b0fcbea9d3c7c58134f47472535eba4ff9d4a65946aa5efad8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Taking deposits hostage

Lines of code Vulnerability details Impact An initial attacker can gain the power to hold subsequent deposits into StakedUSDeV2 hostage, and release them at will e.g. for a ransom. Proof of concept The checkMinShares requirement called after any withdrawal and deposit function checkMinShares...

Dropbox Folder Share <= 1.9.7 - Unauthenticated Remote Code Execution via LFI

Description The plugin does not validate the path and name of a file before including it, allowing unauthenticated visitors to include and execute arbitrary php files on the server, leading to remote code execution...

PT-2023-26946 · Ashlar Vellum · Ashlar-Vellum Cobalt +4

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share version 12 SP0 Build 1204.77 Description: The affected applications lack proper validation of user-supplied data when parsing XE files, which could lead to an out-of-bounds write. ...

Ashlar Incorporated Ashlar-Vellum Buffer Error Vulnerability

Ashlar Incorporated Ashlar-Vellum is the development platform for Ashlar Incorporated's computer-aided design CAD and 3D modeling software. A security vulnerability exists in Ashlar Incorporated Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12, which stems from a lack of proper...

Upgraded Q -> 2 from #2037 [1698131784473]

Judge has assessed an item in Issue 2037 as 2 risk. The relevant finding follows: L‑01 Early users can modify the underlying assets’ unit share price Summary: ERC4626, an extension of ERC20, is a standard that is mostly used in yield-bearing tokens. The contract of an ERC4626 token itself is an...

WordPress WhatsApp Share Button Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WhatsApp Share Button Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5668 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID c35696dd32a5 Credits István Márton Requir...

CVE-2023-4488

The Dropbox Folder Share for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.9.7 via the editor-view.php file. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. Thi...