Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

GHSA-2X3R-7JGM-GH8X Remote code execution in Voyager

Insecure Permission vulnerability found in Voyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

Design/Logic Flaw

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

CVE-2020-36070 affects Voyager (Yoyager) versions 1.4 and earlier. The vulnerability is described as an insecure permission issue that allows a remote attacker to execute arbitrary code by supplying a crafted PHP file to the media component. The issue is classified as critical (CVSS v3.1: 9.8, Ne...

PT-2023-11800 · Voyager · Voyager

Name of the Vulnerable Software and Affected Versions: Voyager versions 1.4 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted .php file to the media component. This is due to an Insecure Permission vulnerability. Recommendations: For Voyager...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

CVE-2020-36070

Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component...

PT-2022-18689 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 4.0.0 through 4.2.4 Description: An issue was discovered in Joomla! where inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in com media. Recommendations: For Joomla! versions 4.0...

PT-2022-33964 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.142 Description: The issue is related to the media: mceusb component. It involves the use of new usb control msg routines. The actual impact and attack plausibility have not yet been proven. Recommendation...

CVE-2022-20325

In Media, there is a possible code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-186473060...

PT-2023-4305 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 103.0.5060.53 Description: The issue is related to a use after free in the Media component, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can be exploited by a remote...

CVE-2022-23801

An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in commedia...

The vulnerability of the Microsoft Edge browser’s Media component relates to the use of memory after it is freed, allowing an attacker to compromise privacy, integrity, and accessibility of information.

The vulnerability of the Microsoft Edge browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Google Chrome browser’s Media component, caused by a numerical overflow, allows a malicious actor to trigger an overflow in the buffer through a specially created HTML page.

The vulnerability of the Google Chrome browser’s Media component is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to trigger the overflow by using a specially created HTML page...

The vulnerability of the Google Chrome browser’s media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTML page...

The vulnerability of the Media component of the Windows operating system, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Media component in the Windows operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google Inc. A code execution vulnerability exists in Google Chrome Media. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...