119 matches found
X (Formerly Twitter): Ability to see hidden likes
The ability to see hidden likes on Twitter/X was a vulnerability. Authenticated users could view another user's hidden likes by making a specific GraphQL API request, even if the target user had their likes set to be hidden...
CVE-2022-46814
Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...
CVE-2022-46814
Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...
CVE-2022-46814 WordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...
CVE-2022-46814
CVE-2022-46814 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Kodex Posts likes plugin, affected in versions
CVE-2022-46814 WordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Pierre Lebedel Kodex Posts likes plugin = 2.4.3 versions...
WordPress plugin Kodex Posts likes 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress Kodex Posts likes Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Kodex Posts likes Type Plugin Vulnerable versions = 2.4.3 Fixed in 2.5.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46814 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1b6d8291d63f Credits minhtuanact...
Malicious code in free-tiktok-likes-app-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b76b527a09e7e8e9f92f7ae5a4fd9c8a4072d8f9f8a16133281a7649b602d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3206 Malicious code in free-tiktok-likes-app-2022 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b76b527a09e7e8e9f92f7ae5a4fd9c8a4072d8f9f8a16133281a7649b602d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tiktok-likes-fans (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca6fc82d5002364bc19bf5af6cd74ebe2192aeef027b2e1ea09406fb47505ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PeerTube 访问控制错误漏洞
PeerTube is a decentralized video sharing service platform. Peertube has an access control error vulnerability that stems from the product's failure to effectively check the status of videos, which could be exploited by attackers to increase the number of likes that modify private videos...
CVE-2021-24379
The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...
Osintgram - A OSINT Tool On Instagram
Osintgram is a OSINT tool on Instagram. Osintgram offers an interactive shell to perform analysis on Instagram account of any users by its nickname. You can get: - addrs Get all registered addressed by target photos - captions Get user's photos captions - comments Get total comments of target's...
CVE-2019-14319
The TikTok formerly Musical.ly application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic...
CVE-2019-14319
The TikTok formerly Musical.ly application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic...
Design/Logic Flaw
Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page...