[SECURITY] Fedora 31 Update: virtualbox-guest-additions-6.1.12-1.fc31

VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. This package contains the VirtualBox Guest Additions which support better integration of VirtualBox guests with the Host, including file sharing, clipboard sharing and Seamless mode...

Microsoft Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an...

CIS Releases 2019 Year in Review

The Center for Internet Security CIS has released its 2019 Year in Review. CIS is home to the Multi-State Information Sharing & Analysis Center MS-ISAC, a Cybersecurity and Infrastructure Security Agency CISA partner focused on cyber threat prevention, protection, response, and recovery for U.S...

[SECURITY] Fedora 32 Update: virtualbox-guest-additions-6.1.12-1.fc32

VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. This package contains the VirtualBox Guest Additions which support better integration of VirtualBox guests with the Host, including file sharing, clipboard sharing and Seamless mode...

Information leakage vulnerability in Credit China, a new generation public credit information service platform of Liaoning Like Information Engineering Co.

The new generation of public credit information service platform is a credit service platform that provides users with powerful functions and background management capabilities to meet the government's needs in data collection, information sharing, reward and punishment linkage, credit supervisio...

OneDrive for Windows Privilege Escalation

The vulnerability of the OneDrive for Windows file sharing service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2020-5611

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5611

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5611

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5611

The CVE-2020-5611 report corresponds to a CSRF vulnerability in the WordPress Social Sharing Plugin (Social Rocket), affecting versions prior to 1.2.10. The exposed component is the Social Sharing Plugin for WordPress; root cause is CSRF allowing an attacker to hijack the administrator’s authenti...

CVE-2020-5611

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2020-5611: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors...

WordPress Social Sharing Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. It is widely used internationally and is compatible with self-developed plug-ins. Powerful and widely used.Social Sharing is a social sharing plug...

PT-2020-18582

Name of the Vulnerable Software and Affected Versions Social Sharing Plugin versions prior to 1.2.10 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. Recommendations For versions prior to 1.2.10, update to version 1.2.10 o...

CVE-2020-6516

Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

WordPress Plugin "Social Sharing Plugin" vulnerable to cross-site request forgery

Overview WordPress Plugin "Social Sharing Plugin" provided by Social Rocket contains a cross-site request forgery vulnerability CWE-352. Akio Furui of Cryptography Laboratory, Department of Information and Communication Engineering, Tokyo Denki University reported this vulnerability to the...

Microsoft OneDrive power-up vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. A power lifting vulnerability exists in Microsoft OneDrive. The vulnerability can be exploited by an attacker with the help of a specially...

Social Sharing Plugin < 1.2.10 - Cross-Site Request Forgery in Settings

The plugin is lacking CSRF check on its Settings form, which could allow attackers to make a logged in administrator change them...