Mozilla Firefox Security Advisory (MFSA2024-63) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2024-63. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Exploit for CVE-2024-50395

CVE-2024-50395 CVE Info An authorization bypass through u...

CVE-2024-50395

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on...

CVE-2024-50395 Media Streaming add-on

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on...

CVE-2024-50395

CVE-2024-50395 affects the Media Streaming add-on. The issue is an authorization bypass via a user-controlled key in versions prior to 500.1.1.6. If exploited on a local network, an attacker could gain privileges. A fix is available in Media Streaming add-on 500.1.1.6 and later (released 2024-08-...

Media Streaming add-on 安全漏洞

Media Streaming add-on is a media streaming add-on. A security vulnerability exists in Media Streaming add-on prior to version 500.1.1.6, which stems from the inclusion of an authorization bypass vulnerability via a user control key...

PT-2024-34172 · Unknown · Media Streaming Add-On

Name of the Vulnerable Software and Affected Versions: Media Streaming add-on versions prior to 500.1.1.6 Description: An authorization bypass through user-controlled key issue has been reported, potentially allowing local network attackers to gain privileges if exploited. Recommendations: For...

CVE-2024-50395: Authorization Bypass Through User-Controlled Key

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on...

WordPress Contact Form 7 Email Add on plugin <= 1.9 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by Le Ngoc Anh in WordPress Plugin Contact Form 7 Email Add on versions = 1.9...

CVE-2024-10898: Improper Control of Filename for Include/Require Statement in PHP Program

The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7emailaddonaddadmintemplate function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

PT-2024-16630

Name of the Vulnerable Software and Affected Versions Contact Form 7 Email Add on plugin for WordPress versions up to, and including, 1.9 Description The issue allows authenticated attackers with Contributor-level access and above to include and execute arbitrary PHP files on the server. This is...

CVE-2024-10683

CVE-2024-10683 affects the WordPress plugin Contact Form 7 – PayPal & Stripe Add-on, due to unsafe use of add_query_arg/remove_query_arg without proper escaping. The issue is Reflected XSS, exploitable by unauthenticated actors who can trick a user into clicking a manipulated link, with exploitat...

WordPress Contact Form 7 - PayPal & Stripe Add-on plugin <= 2.3.1 - Reflected Cross-Site Scripting vulnerability

WordPress Contact Form 7 - PayPal & Stripe Add-on plugin = 2.3.1 - Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Contact Form 7 – PayPal & Stripe Add-on versions = 2.3.1...

CVE-2024-10683: Improper Neutralization of Input During Web Page Generation

The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers...

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

A now-patched security flaw in the Opera web browser could have enabled a malicious extension to gain unauthorized, full access to private APIs. The attack, codenamed CrossBarking , could have made it possible to conduct actions such as capturing screenshots, modifying browser settings, and accou...

CVE-2024-48021

CVE-2024-48021 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Contact Form 7 – PayPal & Stripe Add-on, affecting versions up to 2.3. The issue arises from improper input neutralization during web page generation, enabling Reflected XSS. PatchStack and Red H...

CVE-2024-48021 WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.3...

CVE-2024-48021: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on contact-form-7-paypal-add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through = 2.3...

Qnap QTS OS Command Injection (CVE-2023-23369)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 2023/05/04 and...

Qnap QTS SQL Injection (CVE-2020-36195)

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...