CVE-2018-6460

Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to /status.js with the parameter func=$_APPLOG.Rfunc and extract sensitive information about the machine, including whether the user is connected to a VPN, to which VPN he/she is connected, and what is their real IP address.

• CWE-200

• https://blogs.securiteam.com/index.php/archives/3604Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44042/Exploit, Third Party Advisory, VDB Entry
• https://blogs.securiteam.com/index.php/archives/3604Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44042/Exploit, Third Party Advisory, VDB Entry

Published

Jan 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6446A vulnerability in Brocade Network Advisor Version Before 14…9.8
• CVE-2018-6447A Reflective XSS Vulnerability in HTTP Management Interface …5.4
• CVE-2018-6448A vulnerability in the management interface in Brocade Fabri…7.5
• CVE-2018-6449Host Header Injection vulnerability in the http management i…6.1
• CVE-2018-6458Easy Hosting Control Panel (EHCP) v0.37.12.b allows remote a…
• CVE-2018-6459The rsa_pss_params_parse function in libstrongswan/credentia…
• CVE-2018-6461March Hare WINCVS before 2.8.01 build 6610, and CVS Suite be…
• CVE-2018-6462Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.…
• CVE-2018-6464Simditor v2.3.11 allows XSS via crafted use of svg/onload=al…6.1
• CVE-2018-6465The PropertyHive plugin before 1.4.15 for WordPress has XSS …
• CVE-2018-6466A cross-site scripting (XSS) vulnerability in flickrRSS.php …
• CVE-2018-6467The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-adm…