WordPress Really Simple Security Pro Plugin 9.0.0-9.1.1.1 is vulnerable to Broken Authentication

Software Really Simple Security Pro Type Plugin Vulnerable versions 9.0.0-9.1.1.1 Fixed in 9.1.2 OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-10924 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID dc394c4ae392 Credits István...

WordPress Really Simple Security Pro multisite Plugin 9.0.0-9.1.1.1 is vulnerable to Broken Authentication

Software Really Simple Security Pro multisite Type Plugin Vulnerable versions 9.0.0-9.1.1.1 Fixed in 9.1.2 OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-10924 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 976349dfad8d Credits...

WordPress Really Simple SSL Plugin Authentication Bypass to RCE

This module exploits an authentication bypass vulnerability in the WordPress Really Simple SSL plugin versions 9.0.0 to 9.1.1.1. The vulnerability allows bypassing two-factor authentication 2FA and uploading a plugin to achieve remote code execution RCE. Note: For the system to be vulnerable, 2FA...

CVE-2020-10924

CVE-2020-10924 affects NETGEAR R6700 routers (e.g., V1.0.4.84_10.0.58) where the UPnP daemon (/usr/sbin/upnpd) mishandles length validation of user-supplied data, leading to a stack-based buffer overflow and potential code execution as root. The vulnerability is exploitable by network-adjacent at...

CVE-2020-10924

creationtimestamp| type| source ---|---|--- 2020-07-01 20:12:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/netgearr6700passreset.rb 2020-07-28 22:55:22+00:00| seen| https://t.me/cibsecurity/13713 2025-02-06 03:13:44+00:00| seen|...

Netgear R6700v3 Unauthenticated LAN Admin Password Reset

This module targets ZDI-20-704 aka CVE-2020-10924, a buffer overflow vulnerability in the UPNP daemon /usr/sbin/upnpd, on Netgear R6700v3 routers running firmware versions from V1.0.2.62 up to but not including V1.0.4.94, to reset the password for the 'admin' user back to its factory default of...

openSUSE: Security Advisory for glusterfs (openSUSE-SU-2020:0079_1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal...

CVE-2016-10924

CVE-2016-10924 affects the WordPress ebook-download plugin prior to version 1.2. The connected sources describe a local file inclusion/directory traversal vulnerability in the plugin (notably via the filedownload.php path), enabling an attacker to read arbitrary server files. Impact is consistent...

CVE-2019-10924

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.3. The vulnerability could allow an attacker to execute arbitrary code if the attacker tricks a legitimate user to open a manipulated project. In order to exploit the vulnerability, a valid user must open a manipulated...

CVE-2019-10924

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.3. The vulnerability could allow an attacker to execute arbitrary code if the attacker tricks a legitimate user to open a manipulated project. In order to exploit the vulnerability, a valid user must open a manipulated...

CVE-2019-10924

CVE-2019-10924 affects Siemens LOGO! Soft Comfort (all versions

GLSA-201904-06 : GlusterFS: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-06 GlusterFS: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GlusterFS. Please review the referenced CVE identifiers for details. Impact : Please review the referenced CVE identifiers for details...

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

CVE-2018-10924

CVE-2018-10924: GlusterFS is affected by a memory leak in the fsync(2) path of the GlusterFS client code. The leaky memory can be exploited by an authenticated attacker to trigger a denial-of-service via host memory exhaustion. The description does not specify affected versions or a published fix...

CVE-2018-10924

It was discovered that fsync2 system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine...

CVE-2017-10924

IrfanView 4.44 32bit with FPX Plugin 4.47 allows attackers to execute arbitrary code or cause a denial of service via a crafted .fpx file, related to a "User Mode Write AV starting at FPX!FPXGetScanDevicePropertyGroup+0x000000000000a529."...

CVE-2017-10924

IrfanView 4.44 (32‑bit) with FPX Plugin 4.47 is affected by a FPX-related vulnerability in .fpx handling. The issue stems from a User Mode Write AV starting at FPX!FPX_GetScanDevicePropertyGroup+0x…a529, enabling either arbitrary code execution or a denial of service via a crafted .fpx file. The ...