Opencast Access Control Error Vulnerability

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. An Access Control Error vulnerability exists in Opencast. The vulnerability stems from allowing the distribution of interludes with strict access rules wi...

Microsoft Dynamics 365 (on-premises) Update 2.26

None None...

ExecuteAssembly - Load/Inject .NET Assemblies

ExecuteAssembly is an alternative of CS execute-assembly, built with C/C++ and it can be used to Load/Inject .NET assemblies by; reusing the host spawnto process loaded CLR Modules/AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI,...

WordPress WPS Hide Login plugin <= 1.6.1 - Login Page Protection Bypass vulnerability

Login Page Protection Bypass vulnerability discovered by Sebastian Schmitt in WordPress WPS Hide Login plugin versions = 1.6.1. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.7...

CVE-2021-3337

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...

CVE-2021-3337

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...

Hardcoded credentials

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...

CVE-2021-3337

The CVE-2021-3337 issue affects the MyBB plugin “Hide-Thread-Content” (through 2021-01-27). The vulnerability allows remote attackers to bypass content-reading restrictions by clicking the reply or quote option in the postbit, leading to information disclosure. Affected component is the Hide-Thre...

CVE-2021-3337

The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...

MyBB Hide-Thread-Content plugin security vulnerability

MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A security vulnerability exists in the MyBB Hide-Thread-Content plugin through 2021-01-27, which originates fr...

CVE-2020-8139

A missing access control check in Nextcloud Server 18.0.1, 17.0.4, and 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL...

CVE-2020-8139

CVE-2020-8139 affects Nextcloud Server versions older than 18.0.1, 17.0.4 and 16.0.9, where a missing access control check allows hide-download shares to be downloaded when the URL is appended with /download. Connected documents confirm this is a remote access control vulnerability with potential...

CVE-2020-8139

A missing access control check in Nextcloud Server 18.0.1, 17.0.4, and 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL...

Nextcloud: "Secure View" aka "Hide Download" can be bypassed easily

The mid-2019 announced feature "Secure view" https://nextcloud.com/blog/secure-view-prevent-your-shared-files-from-getting-downloaded/ allows for hiding the Download button on public shares. Even though the announcement admits that there are always workarounds out there to get hands on the file...

WPS Hide Login < 1.5.5 - Secret Login Page Disclosure

fixed a vulnerability in version 1.5.4.2 and below that could allow an attacker to find and access the secret login page...

WordPress WPS Hide Login plugin <= 1.5.4.2 - Secret login page location disclosure vulnerability

Secret login page location disclosure vulnerability found by Jerome Bruandet in WordPress WPS Hide Login plugin versions = 1.5.4.2. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.5.5...

Easy-Hide-IP 5.0.0.3 - (EasyRedirect) Unquoted Service Path Vulnerability

Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows 7 Professional Service Pack 1 Step to discover the unquoted Service:...

CVE-2019-13717

Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page...

Easy-Hide-IP 5.0.0.3 - EasyRedirect Unquoted Service Path

Easy-Hide-IP 5.0.0.3 - EasyRedirect Unquoted Service Path Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Date: 2019-11-22 Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows...

Easy-Hide-IP 5.0.0.3 Unquoted Service Path

Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path Date: 2019-11-22 Exploit Author: Rene Cortes S Vendor Homepage: https://easy-hide-ip.com Software Link: https://easy-hide-ip.com Version: 5.0.0.3 Tested on: Windows 7 Professional Service Pack 1 Step to discover the unquot...