CVE-2022-24307

Mastodon prior to 3.3.2 and 3.4.x prior to 3.4.6 suffers from an access-control weakness due to not compacting incoming signed JSON-LD activities, despite JSON-LD signing being supported since 1.6.0. This affects versions 1.6.0–3.3.2 and 3.4.x–3.4.5, enabling potential improper access handling as...

CVE-2021-24307

creationtimestamp| type| source ---|---|--- 2022-01-03 06:42:01+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1587 2022-01-03 13:36:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5118 2022-01-04 15:31:12+00:00| published-proof-of-concept|...

CVE-2021-24307

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...

CVE-2021-24307

The CVE-2021-24307 entry relates to the WordPress plugin All in One SEO Pack (versions up to 4.1.0.2). The issue allows an authenticated user with aioseo_tools_settings privileges (typically admin) to achieve remote code execution on the host. The root cause involves unserializing values from a b...