EUVD-2014-9129

Malware in sbrugna...

CVE-2014-9304

Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system/proxy, which are inconsistently processed by the request handler in the backend web...

CVE-2014-9304: Undefined Security Weakness

Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system/proxy, which are inconsistently processed by the request handler in the backend web...

PT-2014-8929

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 0.9.9.3 Description The issue allows remote attackers to bypass the web server whitelist and conduct SSRF attacks. Attackers can also execute arbitrary administrative actions by sending multiple crafted...