WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Spotlight Social Media Feeds versions = 1.7.1...

Vulnerability of macOS operating systems, allowing attackers to disclose sensitive information

The vulnerability of Spotlight search engine in macOS operating systems is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to disclose protected information...

CLSA-2025-1738266573 samba: Fix of CVE-2023-34967

Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight...

samba: infinite loop in mdssvc RPC service for spotlight

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

The vulnerability of the Avira Spotlight service is a flaw in the comprehensive antivirus protection provided by Avira Prime. This vulnerability allows attackers to elevate their privileges and execute arbitrary codes.

The vulnerability of Avira Spotlight’s comprehensive antivirus protection solution, Avira Prime, is related to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-51636

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2023-51636

The CVE-2023-51636 issue affects Avira Prime, specifically the Avira Spotlight Service. The vulnerability arises from handling symbolic links, allowing a local attacker who already has low-privileged code execution to abuse the Spotlight Service to delete a file and escalate privileges to SYSTEM....

CVE-2023-51636 Avira Prime Link Following Local Privilege Escalation Vulnerability

Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

Avira Prime Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avira Spotlight...

CVE-2024-31381

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2024-31381 WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2024-31381 WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2024-31381

Technical details about CVE-2024-31381 and affected products are not provided in the connected documents. Monitor for official advisories to learn impact, vulnerable components, and remediation.

PT-2024-24028 · Rebelcode · Rebelcode Spotlight Social Media Feeds

Name of the Vulnerable Software and Affected Versions: RebelCode Spotlight Social Media Feeds versions 1.6.10 and earlier Description: A Cross-Site Request Forgery CSRF issue affects RebelCode Spotlight Social Media Feeds. This issue allows an attacker to perform unintended actions on a user's...

WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Spotlight Social Media Feeds versions = 1.6.10...

WordPress Spotlight Social Media Feeds Plugin <= 1.6.10 is vulnerable to Cross Site Request Forgery (CSRF)

Software Spotlight Social Media Feeds Type Plugin Vulnerable versions = 1.6.10 Fixed in 1.6.11 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-31381 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ea25d8b303d6 Credits Majed Refa...

March 26, 2024—KB5035941 (OS Build 19045.4239) Preview

None None...

ROS-20230920-01

Vulnerability of winbinddpamauthcrap.c component of Samba networking software package is related to operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service Vulnerability in SMB2 packet signing...