WordPress Media Library Assistant Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Media Library Assistant is a media library assistant plugin used in it. An information disclosure vulnerability exists in mlagallery li...

CVE-2020-11731

The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute arbitrary JavaScript...

CVE-2020-11732

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...

CVE-2020-11731

The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute arbitrary JavaScript...

CVE-2020-11732

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...

Arbitrary file deletion

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...

CVE-2020-11731

CVE-2020-11731 affects the WordPress Media Library Assistant plugin prior to 2.82. Multiple XSS vulnerabilities exist in all Settings/Media Library Assistant tabs, enabling remote authenticated users to execute arbitrary JavaScript. Affected version range is WordPress Media Library Assistant plug...

CVE-2020-11732

The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mlagallery link=download...

CVE-2020-11732

Concretely affected: WordPress Media Library Assistant plugin prior to 2.82. Root cause: local file inclusion via unsanitized mla_gallery link parameter (mla_gallery link=download), allowing unauthenticated access to include arbitrary local files. Impact: information disclosure; CVSSv3.1 base sco...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion

The Media Library Assistant plugin before 2.82 for WordPress suffers from a Local File Inclusion vulnerability in mlagallery link=download. PoC The LFI is restricted to the "wp-content" directory...

PT-2020-12812

Name of the Vulnerable Software and Affected Versions Media Library Assistant plugin versions prior to 2.82 Description The issue is related to a Local File Inclusion vulnerability. It affects the mla gallery link when set to download. Recommendations For versions prior to 2.82, update to version...

WordPress Media Library Assistant plugin <= 2.81 - Unauthenticated Limited Local File Inclusion (LFI) vulnerability

Unauthenticated Limited Local File Inclusion LFI vulnerability discovered by Daniel Monzón stark0de in WordPress Media Library Assistant plugin versions = 2.81. Solution Update the WordPress Media Library Assistant plugin to the latest available version at least 2.82...

PT-2020-12811 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin versions prior to 2.82 Description: The issue affects the Media Library Assistant plugin for Wordpress, specifically in all Settings/Media Library Assistant tabs, where multiple XSS vulnerabilities are present...

Wordpress Media Library Assistant 2.81 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Media Library Assistant 2.81 - Local File Inclusion Exploit Author: Daniel Monzón stark0de Vendor Homepage: http://davidlingren.com/ Software Link: https://wordpress.org/plugins/media-library-assistant/ Version:...

Application cannot be started after upgrading to Windows 8.1

Application cannot be started after upgrading to Windows 8.1 Symptoms Consider the following scenario: You install an application in Windows 8 or Windows Server 2012. You upgrade the operating system to Windows 8.1 or Windows Server 2012 R2. You start the application by clicking the desktop...

Program Compatibility Assistant dialog box appears when you start a desktop app from the "Autoplay" dialog box in Windows 8

Program Compatibility Assistant dialog box appears when you start a desktop app from the "Autoplay" dialog box in Windows 8 Symptoms Assume that on a Windows 8-based computer you start a desktop app from the Autoplay dialog box of an external media for the first time, and then you close the deskt...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30773)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to bypass factory reset protection FRP with the help of a voice assistant...

CVE-2020-10262

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the miconsole command cascaded by the SN code shown on the product to get the root shell password, and then the attacker can i read Wi-Fi SSID or password, ...

CVE-2018-21047

An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...

CVE-2018-21047

An issue was discovered on Samsung mobile devices with O8.x software. There is a Factory Reset Protection FRP bypass via the voice assistant because Internet access begins before the Setup Wizard finishes. The Samsung ID is SVE-2018-12894 November 2018...