WordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Broken Access Control

Software Video Gallery – YouTube Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25988 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 1684686ddd67 Credits István Márt...

CVE-2021-25988

creationtimestamp| type| source ---|---|--- 2021-12-29 12:25:45+00:00| seen| https://t.me/cibsecurity/34725...

CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...

CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section

In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...

CVE-2021-25988

The CVE-2021-25988 issue affects the open-source project ifme, with vulnerable versions 1.0.0 through v7.31.4. Reported as a stored XSS vulnerability in the notifications section that can be triggered by sending an ally request to an administrator. The root cause is described as lack of checksum ...

Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure Exploit

Exploit Title: Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure Exploit Author: Nitesh Surana Vendor Homepage: https://www.gxgroup.eu/ont-products/ Version: P4410-V2-1.34H Tested on: Windows/Kali CVE : CVE-2020-25988 import upnpy upnp = upnpy.UPnP Discover UPnP devices on the network...

Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure

Exploit Title: Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure Date: 17th November 2020 Exploit Author: Nitesh Surana Vendor Homepage: https://www.gxgroup.eu/ont-products/ Version: P4410-V2-1.34H Tested on: Windows/Kali CVE : CVE-2020-25988 import upnpy upnp = upnpy.UPnP Discover UPnP...

CVE-2020-25988

creationtimestamp| type| source ---|---|--- 2020-11-17 22:39:20+00:00| seen| https://t.me/cibsecurity/16466 2020-11-21 19:18:00+00:00| published-proof-of-concept| Telegram/UxTNBzpYPuAvWiUw14OoLCI4dqVav6XCEd41yK8XAnw 2020-12-09 03:25:22+00:00| seen| https://t.me/cibsecurity/17346 2020-12-09...

CVE-2020-25988

CVE-2020-25988 affects Genexis Platinum 4410 Router (V2.1, P4410-V2–1.34H) via UPnP Service on port 5555. The X_GetAccess action exposes the admin password to network-adjacent attackers, enabling credential leakage. Public-exploit materials and code samples demonstrate how to invoke the action to...