CVE-2026-4792

The Bread plugin for WordPress (versions up to and including 2.9.12 ) is vulnerable to information exposure due to missing authentication and authorization checks on the download_settings function, which is registered on the plugins_loaded hook and explicitly allows execution on non-admin (public...

CVE-2026-4792 Bread <= 2.9.12 - Missing Authorization to Unauthenticated Information Exposure

The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due to the lack of authentication and authorization checks on the settings export functionality downloadsettings function which is registered on the pluginsloaded hook and explicit...

Get integrated Microsoft Purview Information Protection in Adobe Acrobat—now available

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Data security and compliance are a top priority for leaders as cyberattacks are on the rise. In fact, attacks have increased by 32 percent in the past year, and 1 in 40 organizations...

CVE-2017-2391

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password...

WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload

WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload source: https://www.securityfocus.com/bid/68656/info The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary...

WordPress Plugin CopySafe PDF Protection - Arbitrary File Upload

source: https://www.securityfocus.com/bid/68656/info The CopySafe PDF Protection plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code...

ModSecurity多个拒绝服务漏洞

BUGTRAQ ID: 34096 modsecurity是经常与PHP结合使用的Web应用防火墙。 如果启用了PDF跨站脚本防护的话，提交给PDF文件的非GET请求会导致httpd进程崩溃；此外如果modsecurity解析了缺少部分首部名称的多部内容的话，可能导致Apache崩溃。 Breach Security modsecurity 2.5.8 Breach Security modsecurity 2.5.6 Breach Security modsecurity 2.5.5 厂商补丁： Breach Security ---------------...

Attension acrobat PDF makers, Acrobat PDF protection is not that Secure

+--------------------------------------------. Acrobat PDF protection is not that Secure . +------------------------------------------------------------------+ Affected : Protected PDF documents . Type : Functionaltiy . Date : 16-10-2001 . Author: : NtWaK0...