5567 matches found
CVE-2023-6250 BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read
The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...
WordPress plugin BestWebSoft s Like & Share security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-9194 · Unknown · Asp.Net Zero
Name of the Vulnerable Software and Affected Versions: Asp.Net Zero versions prior to 12.3.0 Description: The issue is related to an open redirect through HTML injection in user messages, allowing remote attackers to redirect targeted victims to any URL via the '' in the WebSocket messages. This...
PT-2023-32576 · Bestwebsoft · Like & Share
Name of the Vulnerable Software and Affected Versions: BestWebSoft's Like & Share WordPress plugin versions prior to 2.74 Description: The issue allows unauthenticated users to access the content of password-protected posts via a meta tag. Recommendations: For versions prior to 2.74, update to...
CVE-2023-6250: Cleartext Storage of Sensitive Information
The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag...
PT-2023-35668 · Rawspeed · Rawspeed
Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the parseWhiteBalance function within DngDecoder, which is part of the rawspeed library...
[SECURITY] Fedora 38 Update: kernel-6.6.7-100.fc38
The kernel meta package...
CVE-2023-50011
PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...
CVE-2023-50011
PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...
[SECURITY] Fedora 38 Update: kernel-6.6.6-100.fc38
The kernel meta package...
[SECURITY] Fedora 39 Update: kernel-6.6.6-200.fc39
The kernel meta package...
CVE-2023-50011: Undefined Security Weakness
PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...
CVE-2023-50011
PopojiCMS 2.0.1 is reported vulnerable to remote command execution via the Meta Social field (CVE-2023-50011). The vulnerability is described across multiple sources (NVD, Red Hat, OSV, CVE list) as a remote command execution issue in PopojiCMS 2.0.1. The available sources confirm the affected pr...
CVE-2023-50011
PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...
CVE-2023-50011
PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field...
Facebook Enables Messenger End-to-End Encryption by Default
Its happened. Details here, and tech details here for messages in transit and here for messages in storage Rollout to everyone will take months, but its a good day for both privacy and security. Slashdot thread...
Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger
Meta has officially begun to roll out support for end-to-end encryption E2EE in Messenger for personal calls and one-to-one personal messages by default in what it called the "most significant milestone yet." "This isn't a routine security update: we rebuilt the app from the ground up, in close...
Fedora: Security Advisory for kernel (FEDORA-2023-15deb2e32a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...