18 matches found
EUVD-2025-9778
Malicious code in bioql PyPI...
CVE-2025-32267
Cross-Site Request Forgery CSRF vulnerability in wpzinc Post to Social Media – WordPress to Hootsuite wp-to-hootsuite allows Cross Site Request Forgery.This issue affects Post to Social Media – WordPress to Hootsuite: from n/a through = 1.5.8...
WordPress WP to Hootsuite plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Post to Social Media – WordPress to Hootsuite versions = 1.5.8...
WordPress plugin Post to Social Media – WordPress to Hootsuite 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... WordPress plugin Post to Social Media - WordPre...
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting
The plugins do not properly sanitise and escape user input before outputting it back in pages and attributes, which could lead to reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=wp-to-buffer-log&s=alert/XSS/...
WordPress to Hootsuite (< 1.3.9) & Buffer (< 3.7.5) - Reflected Cross-Site Scripting
The plugins do not properly sanitise and escape user input before outputting it back in pages and attributes, which could lead to reflected Cross-Site Scripting issues PoC https://example.com/wp-admin/admin.php?page=wp-to-buffer-log=...
Command Execution Vulnerability in the Interpretation of Guangdong Tianchen Network Technology Company Limited (CNVD-2020-59422)
HootSuite PC is a software for data backup and recovery, computer screen casting, game key mapping, and file transfer between cell phones and computers. Guangdong Tianchen Network Technology Co., Ltd Hootsuite suffers from a command execution vulnerability, which can be exploited by an attacker t...
Command Execution Vulnerability in the Interpretation of Guangdong Tianchen Network Technology Company Limited (CNVD-2020-59421)
HootSuite PC is a software for data backup and recovery, computer screen casting, game key mapping, and file transfer between cell phones and computers. Guangdong Tianchen Network Technology Co., Ltd Hootsuite has a command execution vulnerability that can be exploited by an attacker to execute a...
Command Execution Vulnerability in the Interpretation of Guangdong Tianchen Network Technology Company Limited (CNVD-2020-59423)
HootSuite PC is a software for data backup and recovery, computer screen casting, game key mapping, and file transfer between cell phones and computers. Guangdong Tianchen Network Technology Co., Ltd Hootsuite suffers from a command execution vulnerability, which can be exploited by an attacker t...
blog.hootsuite.com Cross Site Scripting vulnerability OBB-1301992
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hootsuite.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1189412 Security Researcher 4NCURZE Helped patch 1408 vulnerabilities Received 7 Coordinated Disclosure badges Received 12 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting hootsuite.com website and...
blog.hootsuite.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-627197 Description| Value ---|--- Affected Website:| blog.hootsuite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Wordpress Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
blog.hootsuite.com XSS vulnerability
Open Bug Bounty ID: OBB-151835 Description| Value ---|--- Affected Website:| blog.hootsuite.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Hootsuite for Twitter & Social - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Hootsuite for Twitter & Social published at the 'play' market has multiple vulnerabilities...
Hootsuite Recovers from Denial of Service Attack
Social media management system Hootsuite recovered rapidly from a denial of service DoS attack late last week, bouncing back after being offline for a few hours Thursday morning. During that time, starting around 9:45 a.m. EST., users of the site were unable to use the service after a malicious...
HootSuite technical issue exposed emails of thousands of users
Social Media Management tool HootSuite today face technical issue and expose email address's of thousands of users. Due of error lots of people receive email reminders with warning that their free 60-day HootSuite Pro trial was about to end, but also included the names and email addresses of othe...
Hootsuite's Fail Owl
Hootsuite is everyone’s social media management platform – allowing mere mortals to manage complex social media campaigns across Facebook, Twitter, LinkedIn and the like. And Owly, its wide-eyed mascot, has become synonymous with the service. But, like any Web-based service, sometimes Hootsuite...
Month Of Twitter Bugs - HootSuite XSS
Thursday, July 2, 2009 MoTB 02: Reflected XSS in HootSuite What is HootSuite "HootSuite is the ultimate Twitter toolbox. With HootSuite, you can manage multiple Twitter profiles, add multiple editors, pre-schedule tweets, and measure your success. HootSuite lets you manage your entire Twitter...