CVE-2022-2367 WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation...

CVE-2022-2367

The CVE-2022-2367 entry concerns the WordPress plugin WSM Downloader (versions ≤ 1.4.0). The vulnerability arises from inadequate validation of the link parameter, allowing bypass of domain restrictions intended to limit which images/files can be downloaded. Affected component/file: WSM Downloade...

CVE-2022-2357

The CVE-2022-2357 entry concerns the WordPress WSM Downloader plugin (versions 1.4.0 and earlier). The vulnerability resides in the plugin’s remote file download feature, enabling unauthenticated access to download local files (including wp-config.php). This is an unauthenticated arbitrary-file-d...

CVE-2022-2357 WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php...

WordPress Plugin WSM Downloader 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2022-16086 · WordPress · Wsm Downloader

Name of the Vulnerable Software and Affected Versions: WSM Downloader WordPress plugin versions 1.4.0 and earlier Description: The issue allows any visitor to use the remote file download feature of the WSM Downloader WordPress plugin to download local files, including sensitive ones like...

CVE-2022-2357: Files or Directories Accessible to External Parties

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php...

WordPress Plugin WSM Downloader 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-2367: Authorization Bypass Through User-Controlled Key

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation...

WordPress WSM Downloader plugin <= 1.4.0 - Domain Name Restriction Bypass vulnerability

Domain Name Restriction Bypass vulnerability discovered by Raad Haddad in WordPress WSM Downloader plugin versions = 1.4.0. Solution Deactivate and delete. This plugin has been closed as of July 8, 2022 and is not available for download. This closure is temporary, pending a full review...

WordPress WSM Downloader plugin <= 1.4.0 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability discovered by Raad Haddad in WordPress WSM Downloader plugin versions = 1.4.0. Solution Deactivate and delete. This plugin has been closed as of July 8, 2022 and is not available for download. This closure is temporary, pending a full review...

CVE-2021-39814

In ppmpvalidatewsm of drmfw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-11084

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an incorrect bounds check in the ppmp validate wsm function of drm fw.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege, requiring Syste...

Remote code execution

A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02...

CVE-2018-7103

A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02...

CVE-2018-7104

A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02...

CVE-2018-7103

HPE iMC Wireless Services Manager (WSM) within HPE Intelligent Management Center is affected by a remote code execution vulnerability in versions earlier than 7.3 E0506P02. The CNVD/NVD entries attribute the vulnerability to improper validation of user-submitted data length before copying into a ...

CVE-2018-7104

HPE Intelligent Management Center (iMC) Wireless Services Manager Software is affected by a Remote Code Execution vulnerability (CVE-2018-7104) in versions prior to IMC WSM 7.3 E0506P02. The issue stems from failing to validate the length of user-submitted data before copying it into a fixed-leng...

CVE-2017-8990

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...

Remote code execution

A remote code execution vulnerability was identified in HPE Intelligent Management Center iMC Wireless Service Manager WSM Software earlier than version WSM 7.3 E0506. This issue was resolved in HPE IMC Wireless Services Manager Software IMC WSM 7.3 E0506P01 or subsequent version...