WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP-FlyBox Type Plugin Vulnerable versions = 6.46 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-38381 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 122a7a0340f4 Credits Skalucy Required privilege...

CVE-2022-38381

The CVE-2022-38381 entry covers FortiADC, affecting 5.0, 6.0.0, 6.1.0, 6.2.0–6.2.3, and 7.0.0–7.0.2. It describes an improper handling of malformed requests (CWE-228) that may allow a remote, unauthenticated attacker to bypass Web Application Firewall protections (e.g., SQL Injection and XSS filt...

CVE-2021-38381

LIVE555 (LIVE555 Media Server/liblivemedia) vulnerability CVE-2021-38381 involves improper handling of MPEG-1/2 files. The issue arises when two RTSP SETUP commands are sent for the same track, leading to a Use-After-Free and daemon crash. Affected component is Live555 up to version 1.08; root ca...