Lucene search
+L

778 matches found

ATTACKERKB
ATTACKERKB
added 2023/05/09 3:15 a.m.6 views

CVE-2022-4537

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...

6.5CVSS6.8AI score0.0032EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/09 3:15 a.m.5 views

CVE-2022-4537

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/05/09 2:47 a.m.10 views

CVE-2022-4537

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits0References3
CVE
CVE
added 2023/05/09 2:47 a.m.47 views

CVE-2022-4537

CVE-2022-4537 covers Hide My WP Ghost – Security Plugin for WordPress. The issue is IP Address Spoofing via the X-Forwarded-For header, allowing logging and login checks to be bypassed. Affected versions are up to and including 5.0.18; PATCH is available in 5.0.20. Impact: potential unauthorized ...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/09 2:47 a.m.28 views

CVE-2022-4537 Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/05/09 12:0 a.m.14 views

WordPress Easy Hide Login Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Easy Hide Login Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32505 Patch priority Low CVSS severity Low 5.9 Developer WebFactory Ltd. PSID 8942bd6e08ac Credits Rio Darmawan Required...

5.9CVSS5.8AI score0.00396EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.10 views

WordPress plugin Hide My WP Ghost 数据伪造问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS7.1AI score0.0032EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2023/05/09 12:0 a.m.12 views

WordPress Hide My WP Ghost Plugin <= 5.0.18 is vulnerable to Bypass Vulnerability

Software Hide My WP Ghost Type Plugin Vulnerable versions = 5.0.18 Fixed in 5.0.20 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2022-4537 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1423c8425d3e Credits rezaduty Required...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/05/05 12:0 a.m.33 views

Debian DSA-5398-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5398 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML...

8.8CVSS7.2AI score0.00968EPSS
SaveExploits0References24
OSV
OSV
added 2023/05/03 12:15 a.m.3 views

DEBIAN-CVE-2023-2463

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.2AI score0.00859EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/07 12:15 p.m.24 views

CVE-2023-23994

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/07 12:15 p.m.21 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...

4.3CVSS4.9AI score0.00392EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/07 11:51 a.m.95 views

CVE-2023-23994

The CVE-2023-23994 entry concerns the WordPress plugin Marcel Bootsman Auto Hide Admin Bar, vulnerable in versions &lt;= 1.6.1. It is a Stored Cross-Site Scripting (XSS) flaw that requires authentication with admin+ privileges. The root cause is an XSS vulnerability in the plugin’s handling of in...

5.9CVSS5AI score0.00392EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/07 11:51 a.m.34 views

CVE-2023-23994 WordPress Auto Hide Admin Bar Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Marcel Bootsman Auto Hide Admin Bar plugin = 1.6.1 versions...

5.9CVSS5.5AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/07 12:0 a.m.9 views

WordPress plugin Auto Hide Admin Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

5.9CVSS4.9AI score0.00392EPSS
SaveExploits0References2
HackRead
HackRead
added 2023/03/29 8:21 p.m.31 views

How to Hide Tables in SQL Server Management Studio

By Owais Sultan SQL Server Management Studio SSMS is a software application developed by Microsoft that is used for configuring, managing,… This is a post from HackRead.com Read the original post: How to Hide Tables in SQL Server Management Studio...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2023/03/15 12:0 a.m.6 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which originates from a download pop-up window that may hide full-screen notifications...

4.3CVSS7.2AI score0.00348EPSS
SaveExploits0References5
Citrix
Citrix
added 2023/03/14 12:0 a.m.10 views

How to Hide HTML5 Workspace App Toolbar Download Option?

Hide 'Download' option in HTML5 Workspace App toolbar...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2023/02/28 12:0 a.m.10 views

How to hide Storefront store from NetScaler Gateway

This article address a workaround to hide multiple stores' choice when adding account via NetScaler Gateway in Workspace at the fist time...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2023/02/27 3:24 p.m.40 views

CVE-2022-4829 Show-Hide / Collapse-Expand < 1.3.0 - Contributor+ Stored XSS via Shortcode

The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against...

5.5AI score0.0049EPSS
SaveExploits2References1
Rows per page
Query Builder