CVE-2020-24534

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

CVE-2022-24534

creationtimestamp| type| source ---|---|--- 2022-04-15 22:36:47+00:00| seen| https://t.me/cibsecurity/40962...

CVE-2022-24534

Win32 Stream Enumeration Remote Code Execution Vulnerability...

CVE-2022-24534

Win32 Stream Enumeration Remote Code Execution Vulnerability...

CVE-2022-24534 Win32 Stream Enumeration Remote Code Execution Vulnerability

...

CVE-2022-24534

Technical details about CVE-2022-24534 are not publicly available in the provided documents. No explicit affected products, root cause, impact, or remediation are described here; monitor for updates.

KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)

The remote Windows host is missing security update 5012653. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26798, CVE-2022-26801, CVE-2022-26786, CVE-2022-24549, CVE-2022-26794,...

KB5012670: Windows 8.1 and Windows Server 2012 R2 Security Update (April 2022)

The remote Windows host is missing security update 5012639 or cumulative update 5012670. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...

KB5012632: Windows Server 2008 Security Update (April 2022)

The remote Windows host is missing security update 5012632 or cumulative update 5012658. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5012666: Windows Server 2012 Security Update (April 2022)

The remote Windows host is missing security update 5012666 or cumulative update 5012650. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2021-24534

creationtimestamp| type| source ---|---|--- 2021-08-16 14:14:44+00:00| seen| https://t.me/cibsecurity/27362...

CVE-2021-24534

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "phpid" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue...

CVE-2021-24534 PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "phpid" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue...

CVE-2021-24534

The CVE concerns the WordPress plugin PhoneTrack Meu Site Manager (v0.1 and earlier). The vulnerability is a stored XSS caused by failing to sanitise/escape the php_id setting when it is echoed back in an HTML attribute, allowing injected scripts to persist in pages. Explanatory payloads are show...