CVE-2018-19040

CVE-2018-19040 affects the WordPress Media File Manager plugin (version 1.4.2 and earlier). The vulnerability is a directory traversal via the dir parameter in the mrelocator_getdir action called through wp-admin/admin-ajax.php, enabling directory listing (and per later sources, may lead to broad...

CVE-2018-19043

CVE-2018-19043 affects the WordPress Media File Manager plugin up to version 1.4.2. The vulnerability arises from a directory traversal in the dir parameter of the mrelocator_rename action, allowing arbitrary file renaming via requests to wp-admin/admin-ajax.php. The root cause is insufficient va...

CVE-2018-19041

The CVE refers to WordPress Media File Manager plugin, version 1.4.2, containing a cross-site scripting (XSS) vulnerability. The flaw is triggered via the dir parameter in an mrelocator_getdir action to wp-admin/admin-ajax.php, allowing injection of arbitrary script/HTML. Public references in the...

CVE-2018-19042

CVE-2018-19042 affects the WordPress Media File Manager plugin (v1.4.2) via a directory traversal in mrelocator_move that lets an attacker move arbitrary files using dir_from/dir_to parameters to wp-admin/admin-ajax.php. OpenVAS and related entries flag multiple vulnerabilities in

CVE-2018-19041

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocatorgetdir action to the wp-admin/admin-ajax.php URI...

WordPress Media File Manager Directory Traversal

Directory traversal vulnerability in WordPress Media File Manager plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2018-9554

The CVE-2018-9554 issue affects Android's IMediaExtractor.cp, specifically in the dumpExtractors path, where a permissions bypass could allow disclosure of recently accessed media files. The underlying impact is local information disclosure without execution privileges, with no user interaction r...

WordPress Media File Manager plugin <= 1.4.2 - Directory Traversal vulnerability

Directory Traversal vulnerability found by boombyte in WordPress Media File Manager plugin versions = 1.4.2. Solution WordPress Media File Manager plugin was closed on 2018 November 8 and is no longer available for download. Please deactivate and uninstall plugin as soon as possible...

WordPress Media File Manager plugin <= 1.4.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by boombyte in WordPress Media File Manager plugin versions = 1.4.2. Solution WordPress Media File Manager plugin was closed on 2018 November 8 and is no longer available for download. Please deactivate and uninstall plugin as soon as possibl...

WordPress Plugin Media File Manager 1.4.2 - Directory Traversal / Cross-Site Scripting

Exploit Title: Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Date: 2018-05-11 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://wordpress.org/plugins/media-file-manager/ Software Link: https://wordpress.org/plugins/media-file-manager/ Version: 1.4.2 CVE: N/A...

WordPress Media File Manager 1.4.2 Directory Traversal

Exploit Title: Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Date: 2018-05-11 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://wordpress.org/plugins/media-file-manager/ Software Link: https://wordpress.org/plugins/media-file-manager/ Version: 1.4.2 CVE: N/A...

Wordpress Media File Manager 1.4.2 Plugin - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://wordpress.org/plugins/media-file-manager/ Software Link:...

Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Cross-Site Scripting

Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Cross-Site Scripting Exploit Title: Wordpress Plugin Media File Manager 1.4.2 - Directory Traversal Date: 2018-05-11 Exploit Author: Pasquale Turi aka boombyte Vendor Homepage: https://wordpress.org/plugins/media-file-manager/ Softwa...

libde265: Multiple vulnerabilities

Background Open h.265 video codec implementation. Description Multiple vulnerabilities have been discovered in libde265. Please review libde265 changelog referenced below for details. Impact A remote attacker could entice a user to open a specially crafted media file using libde265 or linked...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. PoC Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php HTTP/1....

Bento4 Ap4File.cpp File Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the 'AP4File::ParseStream' function of the Ap4File.cpp file in Bento4 version 1.5.1-624. A remote attacker can exploit this vulnerability to cause a denial of service infinite loop with the...

Debian DSA-4251-1 : vlc - security update

A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Adviso...

Debian: Security Advisory (DSA-4251-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A vulnerability in libvorbis affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libvorbis. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-5146 DESCRIPTION: libvorbis, as used in Mozilla Firefox, could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds...