2021.1 IPU – Intel® CSME, SPS and LMS Advisory

Summary: Potential security vulnerabilities in the Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, and Intel® Local Manageability Service Intel® LMS may allow escalation of privilege or information disclosure. Intel is releasing firmware and software updates...

CVE-2021-24516

creationtimestamp| type| source ---|---|--- 2021-10-18 18:32:18+00:00| seen| https://t.me/cibsecurity/30713...

CVE-2021-24516

CVE-2021-24516 affects PlanSo Forms for WordPress (

CVE-2021-24516 PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting

The PlanSo Forms WordPress plugin through 2.6.3 does not escape the title of its Form before outputting it in attributes, allowing high privilege users such as admin to set XSS payload in it, even when the unfilteredhtml is disallowed, leading to an Authenticated Stored Cross-Site Scripting issue...

WordPress Plugin Pie Register Auth Bypass to RCE

This module uses an authentication bypass vulnerability in Wordpress Plugin Pie Register use exploit/unix/webapp/wp/pieregisterbypassrce msf undefinedpieregisterbypassrce show actions ...actions... msf undefinedpieregisterbypassrce set ACTION msf undefinedpieregisterbypassrce show options ...show...

CVE-2020-24516

creationtimestamp| type| source ---|---|--- 2021-06-10 02:58:35+00:00| seen| Telegram/jsItdA8AfIYShPBNOp8qWbsWBQaBP18KB-dE11aAv-gx4Qc...

CVE-2020-24516

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2020-24516

CVE-2020-24516 involves Intel® CSME where a modification of assumed-immutable data in subsystems may allow an unauthenticated user to escalate privileges via physical access. The cited affected CSME versions are before 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22. Root cause: modification of d...