CVE-2020-23060

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file...

CVE-2020-28964

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

CVE-2020-28964

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

CVE-2020-23060

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file...

CVE-2020-23060

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file...

CVE-2020-23060

CVE-2020-23060 affects Internet Download Manager (IDM) 6.37.11.1, with a stack buffer overflow in the Export/Import function that can escalate local privileges via a crafted ef2 file. Root cause: buffer overflow in processing the Export/Import data. Impact is local privilege escalation with high ...

CVE-2020-28964

CVE-2020-28964 affects Internet Download Manager (IDM) 6.37.11.1, with a stack buffer overflow in the Search function. The root cause is an overflow in the search workflow that could enable local privilege escalation. The documents consistently describe the vulnerability as local and requiring no...

CVE-2020-28964

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors...

Internet Download Manager 缓冲区错误漏洞

Tonec Fze Internet Download Manager Idm is a tool to increase download speeds by up to 5 times, resume and schedule downloads from Tonec Fze, Inc. A security vulnerability exists in Internet Download Manager that can be exploited by an attacker to escalate local process privileges via a crafted e...

Internet Download Manager 缓冲区错误漏洞

Tonec Fze Internet Download Manager Idm is a tool to increase download speeds by up to five times, resume and schedule downloads from Tonec Fze, Inc. A buffer error vulnerability exists in Internet Download Manager 6.37.11.1, which originates from a stack buffer overflow found in the search...

PT-2021-10832 · Tonec · Internet Download Manager

Name of the Vulnerable Software and Affected Versions: Internet Download Manager version 6.37.11.1 Description: The issue is related to a stack buffer overflow in the Export/Import function, allowing attackers to escalate local process privileges via a crafted ef2 file. Recommendations: For...

CVE-2021-24736

The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues...

CVE-2021-24736

The CVE-2021-24736 entry concerns the WordPress Shared Files plugin (admin+ stored XSS) prior to version 1.6.57. Connected sources confirm a stored Cross-Site Scripting vulnerability caused by insufficient sanitisation/escaping of certain plugin settings output in HTML attributes, enabling JavaSc...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress Easy Download Manager and File Sharing plugin has a cross-site scripting vulnerability in versions prior ...

WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfilteredhtml capability is disallowed PoC - Create a new Download, add the following payload in the "Version" and "Link Label" fields from the...

WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfilteredhtml capability is disallowed - Create a new Download, add the following payload in the "Version" and "Link Label" fields from the 'Package...

WordPress WordPress Download Manager plugin <= 3.2.15 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Huy Nguyen Inval1d Team in WordPress WordPress Download Manager plugin versions = 3.2.15. Solution Update the WordPress WordPress Download Manager plugin to the latest available version at least 3.2.16...

The vulnerability of the Adobe Download Manager administrator, related to insufficient verification of data authenticity, allows attackers to enhance their privileges.

The vulnerability of the Adobe Download Manager’s download manager is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

WordPress Download Manager plugin <= 3.2.12 - Email Template Setting Update via Cross-Site Request Forgery (CSRF) vulnerability

Email Template Setting Update via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Download Manager plugin versions = 3.2.12. Solution Update the WordPress Download Manager plugin to the latest available version at least 3.2.13...

WordPress Download Manager < 3.2.13 - Email Template Setting Update via CSRF

The plugin did not have CSRF check in place before saving its Email Template setting, allowing attackers to make a logged in admin change them via a CSRF attack PoC...