943 matches found
Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
The Hide My WP Ghost plugin does not prevent redirects to the login page via the authredirect WordPress function, allowing an unauthenticated visitor to access the hidden login page. id: CVE-2024-6420 info: name: Hide My WP Ghost 5.2.02 - Hidden Login Page Disclosure author: jpg0mez severity: hig...
WPS Hide Login <= 1.9.15.2 - Login Page Disclosure
The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...
Driver-hide-file
hide-file выбирайте и скрывайте файлы/пути Windows из пространства ядра с помощью этого драйвера...
Shellcode-Hide
В этом репозитории нет README...
CVE-2024-2473
CVE-2024-2473 — Обнаружение скрытой страницы входа WPS Hide Login Профессиональный сканер на Python для обнаружения раскрытия страницы входа на сайтах WordPress с WPS Hide Login ≤ 1.9.15.2 НаписанVenexy Содержание Обзор Сведения об уязвимости Как это работает Требования Установка Использование...
hide-me
Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...
CVE-2026-94390
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
EUVD-2026-90854
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-94390
The Hide Shipping Method For WooCommerce plugin for WordPress versions
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-100278
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
EUVD-2026-90022
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
CVE-2026-100278
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
CVE-2026-100278
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability allows users with restricted permissions to edit and hide comments belonging to other users. This flaw impacts the integrity of user comments within the platform. No specific exploit information or remediation details are prov...
CVE-2026-100278: Incorrect Authorization
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...
WordPress Easy Hide Login plugin < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure vulnerability
Login Page Protection Bypass / Hidden URL Disclosure vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Easy Hide Login versions 1.7...
CVE-2026-92700
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/fileserver/staticfiles.go, fileHidden uses case-sensitive filepath.Match checks, so case variants can bypass hide rules on case-insensitive filesystems or when mixed-case paths...
CVE-2026-84168
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...
CVE-2026-84168 Easy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL Disclosure
The Easy Hide Login WordPress plugin before 1.7 does not fully enforce its hidden-login protection, allowing an unauthenticated attacker to reach the standard login page through certain password-reset request parameters and to recover the site's configured secret login slug from the returned page...