Lucene search
+L

74 matches found

Patchstack
Patchstack
added 2022/05/04 12:00 a.m.311 views

WordPress Disable Right Click For WP plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Rasi Afeef Patchstack Alliance in WordPress Disable Right Click For WP plugin versions = 1.1.6. Solution No patched version is available. No reply from the vendor...

8.8CVSS2.7AI score0.00415EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/04/19 1:15 p.m.46 views

CVE-2021-43129

A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...

6.5CVSS0.01718EPSS
SaveExploits1References3
OSV
OSV
added 2022/04/19 1:15 p.m.13 views

CVE-2021-43129

A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...

6.5CVSS6.6AI score0.01718EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/04/19 1:15 p.m.5 views

CVE-2021-43129

A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...

6.5CVSS6.6AI score0.01718EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/04/19 12:00 a.m.16 views

PT-2022-11791 · Desire2Learn · Desire2Learn/D2L Learning Management System +1

Name of the Vulnerable Software and Affected Versions: Desire2Learn/D2L Learning Management System LMS version 20.21.7 Description: A bypass exists in the quizzing feature of Desire2Learn/D2L Brightspace, allowing a quiz-taker to access print and copy functionality via the browser's right click...

6.5CVSS6.4AI score0.01718EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2022/04/19 12:00 a.m.12 views

Desire2Learn Learning Management System 安全漏洞

An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...

6.5CVSS5.7AI score0.01718EPSS
SaveExploits1References4
OSV
OSV
added 2022/02/21 6:15 p.m.11 views

CVE-2022-23983

Cross-Site Request Forgery CSRF vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin versions = 3.4.4...

8.8CVSS7.3AI score0.00421EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/21 6:15 p.m.22 views

CVE-2022-23983

Cross-Site Request Forgery CSRF vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin versions = 3.4.4...

8.8CVSS0.00421EPSS
SaveExploits0References2
Prion
Prion
added 2022/02/21 6:15 p.m.28 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin versions = 3.4.4...

6.8CVSS8.6AI score0.00421EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/02/21 5:49 p.m.129 views

CVE-2022-23983

The CVE concerns WordPress WP Content Copy Protection & No Right Click plugin (versions

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/02/21 5:49 p.m.32 views

CVE-2022-23983 WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin Settings Update discovered in WP Content Copy Protection & No Right Click WordPress plugin versions = 3.4.4...

4.3CVSS8.9AI score0.00421EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2022/02/16 12:00 a.m.26 views

WordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Content Copy Protection & No Right Click plugin versions = 3.4.4 by Muhammad Daffa. Solution Update the WordPress WP Content Copy Protection & No Right Click plugin to the latest available version at least 3.4.5...

8.8CVSS2.8AI score0.00421EPSS
SaveExploits0References2Affected Software1
Microsoft KB
Microsoft KB
added 2021/09/30 12:00 a.m.16 views

September 30, 2021—KB5005611 (OS Builds 19041.1266, 19042.1266, and 19043.1266) Preview

None None...

6.1AI score
SaveExploits0
Patchstack
Patchstack
added 2021/08/09 12:00 a.m.31 views

WordPress Disable Image Right Click plugin <= 1.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex in WordPress Disable Image Right Click plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of January 6, 2022 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS1.7AI score0.01714EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2021/05/14 12:15 p.m.10 views

CVE-2021-24188

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Content Copy Protection & No Right Click WordPress plugin before 3.1.5, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...

8.8CVSS5.9AI score0.01325EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2021/05/14 12:00 a.m.13 views

PT-2021-15734 · WordPress · Wp Content Copy Protection & No Right Click

Name of the Vulnerable Software and Affected Versions: WP Content Copy Protection & No Right Click WordPress plugin versions prior to 3.1.5 Description: The issue allows low-privileged users to exploit the AJAX action 'cp plugins do button job later callback' to install any plugin, including...

8.8CVSS8.6AI score0.01325EPSS
SaveExploits2References3
Patchstack
Patchstack
added 2021/04/22 12:00 a.m.10 views

WordPress WP Content Copy Protection & No Right Click plugin <= 3.1.4 - Arbitrary Plugin Installation and Activation vulnerability

Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress WP Content Copy Protection & No Right Click plugin versions = 3.1.4. Solution Update the WordPress WP Content Copy Protection & No Right Click plugin to the latest available version at least 3.1.5...

3.2AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/03/29 2:29 p.m.10 views

CVE-2019-6481

Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach,...

7.5CVSS7.2AI score0.02142EPSS
SaveExploits1References4
Prion
Prion
added 2019/03/29 2:29 p.m.28 views

Design/Logic Flaw

Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach,...

5CVSS7.4AI score0.02142EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/03/29 1:22 p.m.35 views

CVE-2019-6481

Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach,...

7.4AI score0.02142EPSS
SaveExploits1References4
Rows per page
Query Builder