ABPTTS - TCP Tunneling Over HTTP/HTTPS For Web Application Servers

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

ALSA-2021:1789 Moderate: gssdp and gupnp security update

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. The...

Command Execution Vulnerability in WPS Office 2019 For Linux

WPS Office 2019 is a new 2019 version of wps office software suite developed by Kingsoft. A command execution vulnerability exists in WPS Office 2019 For Linux, which can be exploited by an attacker to gain server control privileges...

Memory Corruption Vulnerability in WPS Viewing

WPS Viewer is an image processor that combines image viewing, beautification, format conversion and other functions. A memory corruption vulnerability exists in WPS Viewer, which can be exploited by attackers to cause a denial of service...

Logic Flaw Vulnerability in WPS+ Cloud Documents

WPS+ Cloud Documents is an efficient and secure cloud office solution launched by Kingsoft Office for enterprise customers. WPS + Cloud Documents has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Stack overflow vulnerability in wps text

wps text is a text editing and processing software. A stack overflow vulnerability exists in wps text, which can be exploited by an attacker to gain control of the server...

CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

Design/Logic Flaw

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

CVE-2021-3332

The CVE-2021-3332 vulnerability affects the WordPress WPS Hide Login plugin (versions up to 1.6.1). It enables remote attackers to bypass the login-page protection mechanism via the post_password field. Impact is a bypass of protection, with no exploitation details provided in the documents beyon...

CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

CVE-2021-3332

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

PT-2021-20100

Name of the Vulnerable Software and Affected Versions WPS Hide Login version 1.6.1 Description The issue allows remote attackers to bypass a protection mechanism. This is achieved by exploiting the post password parameter. Recommendations For WPS Hide Login version 1.6.1, consider updating to a...

CVE-2021-3332: Improper Authentication

WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via postpassword...

WPS Hide Login 安全漏洞

A security vulnerability exists in WPS Hide Login 1.6.1 that allows remote attackers to bypass the protection mechanism via a post password...

WordPress WPS Hide Login plugin <= 1.6.1 - Login Page Protection Bypass vulnerability

Login Page Protection Bypass vulnerability discovered by Sebastian Schmitt in WordPress WPS Hide Login plugin versions = 1.6.1. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.7...

Binary Vulnerability in WPS Office Professional (CNVD-2021-03294)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A binary vulnerability exists in WPS Office Professional Edition, which can be...

Binary Vulnerability in WPS Office Professional (CNVD-2021-03295)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A binary vulnerability exists in WPS Office Professional Edition, which can be...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-03292)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A memory corruption vulnerability exists in WPS Office Professional Edition, which...

Binary Vulnerability in WPS Office Professional Edition

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A binary vulnerability exists in WPS Office Professional Edition, which can be...