[SECURITY] [DSA 5785-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5785-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2024 https://www.debian.org/security/faq -...

Modula < 2.7.5 - Incomplete Authorization via 'save_image' and 'save_images'

Description The Modula plugin for WordPress is vulnerable to unauthorized modification of data due to an incomplete capability check on the 'saveimage' and 'saveimages' functions in versions up to, and including, 2.7.4. This makes it possible for authenticated attackers with the 'editothersposts'...

PT-2021-21824 · Microsoft · Onefuzz

Name of the Vulnerable Software and Affected Versions: OneFuzz versions 2.12.0 through 2.30.0 Description: The issue is related to an incomplete authorization check in OneFuzz, allowing an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFu...