firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

The vulnerability of the embedded software of NETGEAR DGN1000 lies in the ability to bypass the authentication process by using an alternative path or channel, allowing a hacker to execute arbitrary code.

The vulnerability of the embedded software of NETGEAR DGN1000 lies in the ability to bypass the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP requests remotely...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

firefox: Alt-Svc ALPN validation failure when redirected

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site...

SonicWALL SSL-VPN 安全漏洞

SonicWALL SSL-VPN is a VPN connection solution from SonicWALL USA. The product is applied for remote secure connections. A security vulnerability exists in SonicWALL SSL-VPN that stems from the presence of an SSL-VPN Multi-Factor Authentication Bypass MFA vulnerability, which could lead to an...

SUSE CVE-2025-0239

When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability previously existed in Mozilla Firefox version 134, which stemmed from a failure of ALPN to properly validate certificates when using Alt-Svc if the originating server redirecte...

PT-2024-36679 · Vibethemes · Wplms

Name of the Vulnerable Software and Affected Versions: VibeThemes WPLMS versions 1.9.9 and earlier Description: The issue is related to an authentication bypass using an alternate path or channel, allowing unauthorized access. This problem lets a user bypass authentication using another path...

CVE-2024-43234

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice allows Authentication Bypass.This issue affects Woffice: from n/a through 5.4.14...

PT-2024-36667 · Wovax · Wovax Idx

Name of the Vulnerable Software and Affected Versions: Wovax IDX versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which allows unauthorized access. This problem affects Wovax IDX, enabling authentication bypass...

PT-2024-30397 · Woffice · Office

Name of the Vulnerable Software and Affected Versions: Woffice versions through 5.4.14 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Woffice, which allows authentication bypass. Recommendations: For versions through 5.4.14, updat...

PT-2024-36176 · Inspireui · Inspireui Listapp Mobile Manager

Name of the Vulnerable Software and Affected Versions: InspireUI ListApp Mobile Manager versions 1.7.7 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which allows unauthorized access. Recommendations: For versions 1.7.7 and earlier,...

PT-2024-36220 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.7 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This vulnerability allows attackers to bypass authentication using an alternate path. There is ...

WordPress plugin CoSchool LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin vBSSO-lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...