PT-2024-27600 · WordPress · Gutenberg

Name of the Vulnerable Software and Affected Versions: Gutenberg versions through 18.6.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions...

SaltStack Salt REST API Arbitrary Command Execution Exploit

This Metasploit module exploits an authentication bypass and command injection in SaltStack Salt's REST API to execute commands as the root user. The following versions have received a patch: 2015.8.10, 2015.8.13, 2016.3.4, 2016.3.6, 2016.3.8, 2016.11.3, 2016.11.6, 2016.11.10, 2017.7.4, 2017.7.8,...

SMPlayer 18.6.0 - Memory Corruption (DoS) Vulnerability

Document Title: =============== SMPlayer 18.6.0 - Memory Corruption DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2138 Release Date: ============= 2018-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 213...