WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Media LIbrary Assistant versions = 3.41...

CVE-2026-102261

CVE-2026-102261 Ce projet contient un vérificateur non destructif permettant de confirmer qu'une instance autorisée de Camaleon CMS applique l'autorisation introduite dans la version 2.9.3. Périmètre Le problème affecte POST /admin/media/crop dans Camaleon CMS jusqu'à 2.9.2. Un utilisateur...

CVE-2021-29447

CVE-2021-29447 WordPress 5.6-5.7 - XXE مصادق عليه Author+ https://blog.wpsec.com/wordpress-xxe-in-media-library-cve-2021-29447/ الاستخدام: -l LHOST مثال: 127.0.0.1 -n NAME مثال: payload.wav -dn DTDNAME مثال: evil.dtd -r READ مثال: ../wp-config.php evil-wav-dtd-xxe.py: خطأ: الوسائط التالية مطلوبة:...

CVE-2019-11933

CVE-2019-11933 فساد الكومة Heap corruption في منتقي الوسائط في واتساب يؤثر على واتساب للأندرويد قبل الإصدار 2.19.291 الخلفية يتم تقسيم ملف GIF إلى أجزاء، يتم تمييز كل جزء ببايت محدد: الصورة 0x2C يصف قسم الصورة إطارًا واحدًا في ملف GIF، ويحتوي على معلومات مثل الارتفاع والعرض، بالإضافة إلى الصورة...

CVE-2023-39024-5-POC

إثبات المفهوم لـ CVE-2023-39024 و CVE-2023-39025 إثبات المفهوم لـ CVE-2023-39024 و CVE-2023-39025 Harman Media Suite نظرة عامة التطبيق المتأثر: Harman Media Suite الإصدارات المتأثرة: 4.2.0 وما دون الوصف: تطبيق Harman Media Suite الإصدارات 4.2.0 وأقل عرضة لثغرة تزوير الطلب من جانب الخادم SSRF...

CVE-2026-94505

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

EUVD-2026-91961

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-94505

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 4.5.0 . The root cause is the plugin's failure to properly verify user permissions before performing actions. This allows authentica...

[SECURITY] Fedora 45 Update: vlc-3.0.24-3.fc45

VLC media player is a highly portable multimedia player and multimedia framew ork capable of reading most audio and video formats as well as DVDs, Audio CDs VC Ds, and various streaming protocols. It can also be used as a media converter or a server to stream in uni-cast or multi-cast in IPv4 or...

[SECURITY] Fedora 45 Update: rygel-46.0-2.fc45

Rygel is a home media solution that allows you to easily share audio, video a nd pictures, and control of media player on your home network. In technical terms it is both a UPnP AV MediaServer and MediaRenderer implemented through a plug -in mechanism. Interoperability with other devices in the...

[SECURITY] Fedora 45 Update: mate-media-1.28.1-9.fc45

This package contains a few media utilities for the MATE desktop, including a volume control...

[SECURITY] Fedora 45 Update: icecast-2.4.4-29.fc45

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 45 Update: gstreamer1-plugins-good-1.28.7-2.fc45

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

PT-2026-104589

Name of the Vulnerable Software and Affected Versions wcms versions prior to 3.18.1 Description Authenticated editors can achieve remote code execution by exploiting an unvalidated path in the 'POST /api/v0/media/upload/:path' endpoint. This flaw allows the upload of .php files that the web serve...

binaryen-133-1.1 on GA media (moderate)

binaryen-133-1.1 on GA media Announcement ID: openSUSE-SU-2026:11915-1 Rating: moderate Cross-References: CVE-2025-14956 CVE-2025-14957 CVE-2026-8257 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues fix...

gnumeric-1.12.62+8-1.1 on GA media (moderate)

gnumeric-1.12.62+8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11919-1 Rating: moderate Cross-References: CVE-2026-97222 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

firefox-esr-153.4.0-1.1 on GA media (moderate)

firefox-esr-153.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11917-1 Rating: moderate Cross-References: CVE-2026-100756 CVE-2026-100757 CVE-2026-100758 CVE-2026-100759 CVE-2026-100760 CVE-2026-100762 CVE-2026-100765 CVE-2026-100766 CVE-2026-100767 CVE-2026-100769 CVE-2026-100770...

bind-9.20.29-1.1 on GA media (moderate)

bind-9.20.29-1.1 on GA media Announcement ID: openSUSE-SU-2026:11916-1 Rating: moderate Cross-References: CVE-2026-19033 CVE-2026-19662 CVE-2026-19666 CVE-2026-19667 CVE-2026-19668 CVE-2026-19941 CVE-2026-75029 CVE-2026-76163 CVE-2026-77119 CVE-2026-77692 CVE-2026-78301 CVE-2026-80274...

libwireshark19-4.6.9-1.1 on GA media (moderate)

libwireshark19-4.6.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:11912-1 Rating: moderate Cross-References: CVE-2026-95386 CVE-2026-95387 CVE-2026-95388 CVE-2026-95389 CVE-2026-95390 CVE-2026-95391 CVE-2026-95392 CVE-2026-95393 CVE-2026-95394 CVE-2026-95395 CVE-2026-96415 CVE-2026-96416...

PT-2026-104548

Name of the Vulnerable Software and Affected Versions Nelio Content – Editorial Calendar & Social Media Auto-Posting versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows...