Leap Apps Group Blue Light Filter 安全漏洞

Leap Apps Group Blue Light Filter is a blue light filter application from Leap Apps Group, Inc. A security vulnerability exists in Leap Apps Group Blue Light Filter version v.1.5.5 that originates from an unauthorized application that causes privilege escalation through manipulation of the...

CVE-2023-29758

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files...

CVE-2023-25029

Cross-Site Request Forgery CSRF vulnerability in utahta WP Social Bookmarking Light plugin = 2.0.7 versions...

CVE-2023-25029

Cross-Site Request Forgery CSRF vulnerability in utahta WP Social Bookmarking Light plugin = 2.0.7 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in utahta WP Social Bookmarking Light plugin = 2.0.7 versions...

CVE-2023-25029

CVE-2023-25029 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Social Bookmarking Light by utahta, affected at versions

WordPress plugin WP Social Bookmarking Light 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-19879 · WordPress · Utahta Wp Social Bookmarking Light

Name of the Vulnerable Software and Affected Versions: utahta WP Social Bookmarking Light plugin versions 2.0.7 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...

NimPlant - A Light-Weight First-Stage C2 Implant Written In Nim

ByCas van Cooten @chvancooten, with special thanks to some awesome folks: Fabian Mosch @S3cur3Th1sSh1t for sharing dynamic invocation implementation in Nim and the Ekko sleep mask function snovvcrash @snovvcrash for adding the initial version of execute-assembly & self-deleting implant option...

WP Social Bookmarking Light <= 2.0.7 - Cross-Site Request Forgery (CSRF)

The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request...

WordPress WP Social Bookmarking Light Plugin <= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Social Bookmarking Light Type Plugin Vulnerable versions = 2.0.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25029 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID df3454428c26 Credits Mika...

SUSE CVE-2006-3747

Off-by-one error in the ldap scheme handling in the Rewrite module modrewrite in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via...

SUSE CVE-2007-5753

Unspecified vulnerability in Light FMan PHP lfman or lightfman before 2.0rc1 has unknown impact and attack vectors related to "actions."...

SUSE CVE-2011-3153

dmrc.c in Light Display Manager aka LightDM before 1.1.1 allows local users to read arbitrary files via a symlink attack on /.dmrc...

SUSE CVE-2012-3514

OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service CPU consumption via unspecified vectors...

SUSE CVE-2013-4331

Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...

SUSE CVE-2015-0001

The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...

SUSE CVE-2015-8316

Array index error in LightDM aka Light Display Manager 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service process crash via an XDMCP request packet with no address...

SUSE CVE-2016-4857

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

SUSE CVE-2016-4858

Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light...