CVE-2024-20771 Bridge 2024 MOV File parsing memory corruption

Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2024-20771

CVE-2024-20771 affects Adobe Bridge (Bridge 13.0.6, 14.0.2 and earlier). The issue is an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). A remediation/public fix is the APSB24-24 security update, which addresses ...

Edwiser Bridge < 3.0.4 - Authenticated (Administrator+) SQL Injection

Description The Edwiser Bridge plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a buffer overflow vulnerability that stems from the application's susceptibility to out-of-bounds reads, leading to sensitive memory leaks, which can be exploited by an attacker who can bypass measure...

APSB24-24 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses an important vulnerability that could lead to memory leak...

Adobe Bridge 13.x < 13.0.7 / 14.x < 14.0.3 Vulnerability (APSB24-24)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.7 or 14.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-24 advisory. - Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to...

Adobe Bridge 13.x < 13.0.7 / 14.x < 14.0.3 Vulnerability (APSB24-24)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.7 or 14.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-24 advisory. - Bridge versions 13.0.6, 14.0.2 and earlier are affected by an out-of-bounds read vulnerability that cou...

Unbreakable Enterprise kernel security update

4.14.35-2047.535.2.1 - netfilter: nftables: reject QUEUE/DROP verdict parameters Florian Westphal Orabug: 36467681 CVE-2024-1086 4.14.35-2047.535.2 - Fix null ptr in rdstcprecvpath Allison Henderson Orabug: 33499812 - LTS version: v4.14.338 Saeed Mirzamohammadi - crypto: scompress - initialize...

CVE-2024-31260

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260 WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

CVE-2024-31260

CVE-2024-31260 is an SQL Injection vulnerability in WisdmLabs Edwiser Bridge for WordPress, affecting Edwiser Bridge versions up to 3.0.2 (inclusive). The issue arises from improper neutralization of special elements used in SQL commands. Reports indicate the vulnerability is patched (Edwiser Bri...

CVE-2024-31260 WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2...

WordPress Plugin Edwiser Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

PT-2024-23904 · Edwiser · Edwiser Bridge

Name of the Vulnerable Software and Affected Versions: Edwiser Bridge versions 3.0.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress Plugin Edwiser Bridge versions = 3.0.2...

WordPress Edwiser Bridge Plugin <= 3.0.2 is vulnerable to SQL Injection

Software Edwiser Bridge Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.0.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31260 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 511519e30ba2 Credits Muhammad Daffa Required privilege Administrator...

CVE-2024-26761

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address HPA the HDM decoder registers are programmed wi...

Unable to change ciphers or SSL parameters on SSL Bridge virtual server.

No option is available to change ciphers or SSL parameters on SSLBRIDGE type virtual server...

Firewall Bypass

github.com/chirpstack/chirpstack-gateway-bridge/ is vulnerable to Firewall Bypass. The vulnerability is due to the firewall accepting specific TCP packets outside the ESTABLISHED connection state...