WordPress HashThemes Demo Importer plugin <= 1.1.1 - Improper Access Control allowing content deletion vulnerability

Improper Access Control allowing content deletion vulnerability discovered by Ramuel Gall WordFence in WordPress HashThemes Demo Importer plugin versions = 1.1.1. Solution Update the WordPress HashThemes Demo Importer plugin to the latest available version at least 1.1.2...

CVE-2020-3485

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

Cisco Vision Dynamic Signage Director Web Management Software Privilege Permission and Access Control Issues Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A Permission Granting and Access Control Issue vulnerability exists in the Role-Based Access Control RBAC feature of the Web Management Software in versions prior to Cisco Vision Dynamic Signa...

PT-2020-3817 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A spoofing issue exists due to improper sanitization of specially crafted web requests by Microsoft SharePoint Server. An authenticated attacker can exploit this by...

CVE-2020-9780

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

Code injection

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

CVE-2020-9780

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher...

CVE-2020-9780

CVE-2020-9780 affects Apple iOS/iPadOS Mail: a local attacker may view deleted content in the app switcher due to previews not being cleared when content is deleted. Root cause: previews weren’t cleared, allowing visibility of deleted mail content in the app switcher. Impact is limited to a local...

Logic Flaw Vulnerability in EZR Mobile Mall Product System

EZR mobile mall product system supports a variety of mall types to help brands realize online and offline integrated business. EZR mobile mall product system has a logic flaw vulnerability, an attacker can use the vulnerability to arbitrarily delete the content of the site...

Hefei Yilang Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Hefei Yilang Network Technology Co., Ltd. is a company specializing in Internet technology services, development and application. Hefei a wave of network technology limited company building system there are logical flaws in the vulnerability, the attacker can use the loophole to obtain super...

WordPress CTHthemes Unspecified Vulnerability in CityBook, TownHub and EasyBook

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress CTHthemes CityBook versions prior to 2.3.4, TownHub versions prio...

Microsoft Dynamics 365 Field Service Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 Field Service is a field service management system, a business application that helps organizations deliver field service to customer locations. This application combines workflow automation, scheduling algorithms, and mobility to arm employees to make it successful when...

CVE-2020-7048

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state deleting all site content stored in that table, as demonstrated by a wp-admin/admin-post.php?db-reset-tables=comments...

CVE-2019-20209

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference IDOR via wp-admin/admin-ajax.php to delete any page/post/listing...

CVE-2018-17996

LayerBB before 1.1.3 allows CSRF for adding a user via admin/newuser.php, deleting a user via admin/members.php/deleteuser/, and deleting content via mod/delete.php/...

CVE-2018-17996

LayerBB before 1.1.3 allows CSRF for adding a user via admin/newuser.php, deleting a user via admin/members.php/deleteuser/, and deleting content via mod/delete.php/...

Cross site request forgery (csrf)

LayerBB before 1.1.3 allows CSRF for adding a user via admin/newuser.php, deleting a user via admin/members.php/deleteuser/, and deleting content via mod/delete.php/...

CVE-2017-11876

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delet...

Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery

Overview Multiple Recording Hard disk products provided by I-O DATA DEVICE, INC. contain a cross-site request forgery vulnerability due to an issue in the web management screen. kaito834 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#35062083: Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery

Multiple Recording Hard disk products provided by I-O DATA DEVICE, INC. contain a cross-site request forgery vulnerability due to an issue in the web management screen. Impact If a user views a malicious page, an arbitrary content may be deleted. Solution Update the Firmware Apply the appropriate...