PT-2024-22097 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.7.9 Apple iPadOS versions prior to 16.7.9 Apple macOS Ventura versions prior to 13.6.8 Apple macOS Monterey versions prior to 12.7.6 Apple iOS versions prior to 17.6 Apple iPadOS versions prior to 17.6 Apple mac...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before version 16.7.9 and iPadOS before version 16.7.9, which stems from the fact...

The vulnerability of the libvpx video encoding/decoding library, related to buffer overflows in the queue mechanism, allows attackers to trigger service failures or cause other adverse effects.

The vulnerability of the libvpx video encoding/decoding library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions or other adverse effects...

The vulnerability of Zoom’s video conferencing software relates to operations that go beyond the buffer limits in memory, allowing attackers to trigger a service failure.

The vulnerability of Zoom’s video conferencing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Telegram App Flaw Exploited to Spread Malware Hidden in Videos

A zero-day security flaw in Telegram's mobile app for Android called EvilVideo made it possible for attackers to share malicious files disguised as harmless-looking videos. The exploit appeared for sale for an unknown price in an underground forum on June 6, 2024, ESET said. Following responsible...

CVE-2024-6629

The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-6629

The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress All-in-One Video Gallery plugin <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Video Shortcode vulnerability discovered by Webbernaut in WordPress Plugin All-in-One Video Gallery versions = 3.7.1...

CVE-2024-6629

CVE-2024-6629 affects All-in-One Video Gallery for WordPress; versions up to and including 3.7.1 are vulnerable to Stored Cross-Site Scripting via the Video shortcode due to insufficient input sanitization and output escaping. Exploitation requires at least contributor-level authentication. The v...

WordPress All-in-One Video Gallery Plugin <= 3.7.1 is vulnerable to Cross Site Scripting (XSS)

Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.8.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6629 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 570fc0403d8c Credits Webbernaut...

The vulnerability of Zoom, a video conferencing software, is related to insufficient verification of data authenticity, allowing attackers to exploit their privileges.

The vulnerability of Zoom, a video conferencing software, is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to enhance their privileges...

WordPress plugin All-in-One Video Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in t...

The vulnerability of Zoom’s video conferencing software lies in its uncontrolled search path, which allows attackers to trigger service failures.

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2024-37758 · WordPress · All-In-One Video Gallery

Name of the Vulnerable Software and Affected Versions: All-in-One Video Gallery plugin for WordPress versions up to, and including, 3.7.1 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's Video shortcode, allowing...

The vulnerability of the development package for integrating cloud services and communication functions in IoT devices. The Kalay SDK is a microprogramming software for video surveillance cameras such as Owlet Cam v1, Owlet Cam v2, Wyze Cam v3, and Roku Indoor Camera SE. This vulnerability stems from insufficient data authentication checks, allowing unauthorized access by intruders to protected information.

The vulnerability of the development package for integrating cloud services and communication functions in IoT devices is related to insufficient data authentication checks. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information. This vulnerabilit...

Telegram 安全漏洞

Telegram is an instant messaging mobile application open-sourced by Telegram. A security vulnerability exists in Telegram version 10.14.4 and earlier versions. An attacker exploiting the vulnerability could send a malicious application disguised as a video...

Hikvision Video Recorders Command Injection (CVE-2024-29948)

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Hikvision Video Recorders Improper Restriction of Excessive Authentication Attempts (CVE-2020-7057)

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

Hikvision Video Recorders NULL Pointer Dereference (CVE-2024-29947)

There is a NULL pointer dereference vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected product, causing a process abnormality. This plugin only works with Tenable.ot. Please visit...

Hikvision Video Recorders Out-of-bounds Read (CVE-2024-29949)

There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulnerability by sending specially crafted messages to a vulnerable device, causing a service abnormality. This plugin only works with Tenable.ot. Please visit...