CVE-2021-32469

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS Wi-Fi Protected Setup protocol. Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 Affected Software Versions 7.4.0.0; Out-of-bounds read...

CVE-2021-32469

CVE-2021-32469 concerns MediaTek Wi‑Fi WPS handling in NETGEAR devices and other products. Affected chipsets include MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, with reported out‑of‑bounds read in the WPS process. The vulnerability is tied to the way WPS i...

CVE-2021-37562

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS Wi-Fi Protected Setup protocol. Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read...

CVE-2021-37562

CVE-2021-37562 affects MediaTek chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 used in NETGEAR devices (and others) and relates to mishandling of the WPS protocol, specifically an out-of-bounds read. Affected software version is 7.4.0.0. CVSS metrics from...

WordPress WPS Hide Login plugin authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress WPS Hide Login plugin has an authorization issue vulnerability in versions prior to 1.9.1, which ste...

CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

Design/Logic Flaw

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

CVE-2021-24917

Affected software/versions: WordPress WPS Hide Login plugin earlier than 1.9.1. Issue: Incorrect authorization allows unauthenticated users to discover the secret login page by crafting a request to /wp-admin/options.php with a random referer. This results in information disclosure (secret login ...

CVE-2021-24917 WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user...

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The plugin has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user. PoC curl --referer "something" -sIXGET https://example.com/wp-admin/options.php HTTP/2 302 ... location:...

WordPress WPS Hide Login plugin <= 1.9 - Protection Bypass with Referer-Header vulnerability

Protection Bypass with Referer-Header vulnerability discovered by Daniel Ruf in WordPress WPS Hide Login plugin versions = 1.9. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.9.1...

WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

The plugin has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user. curl --referer "something" -sIXGET https://example.com/wp-admin/options.php HTTP/2 302 ... location:...

WordPress WPS Hide Login Login Page Revealer

This module exploits a bypass issue with WPS Hide Login version use auxiliary/scanner/http/wp/wpshideloginrevealer msf undefinedwpshideloginrevealer show actions ...actions... msf undefinedwpshideloginrevealer set ACTION msf undefinedwpshideloginrevealer show options ...show and set options... ms...

Binary Vulnerability in WPS Pictures of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-56429)

WPS Photo is a photo processing software. A binary vulnerability exists in WPS Picture of Zhuhai Kingsoft Office Software Limited, which can be exploited by attackers to cause a denial of service...

Kingsoft WPS Office for Android suffers from information leakage vulnerability

WPS Office is an office software. An information disclosure vulnerability exists in Kingsoft WPS Office for Android, which can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co.

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Binary Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49105)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...

Binary vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2021-49106)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. A binary vulnerability exists in WPS Office by Kingsoft Office Software Zhuhai Limited, which can be exploited by attacker...