WordPress WPS Limit Login plugin <= 1.4.5 - Stored Cross-Site Scripting (XSS) and Protection Bypass vulnerabilities

Stored Cross-Site Scripting XSS and Protection Bypass vulnerabilities found by Julio Potier in WordPress WPS Limit Login plugin versions = 1.4.5. Solution Update the WordPress WPS Limit Login plugin to the latest available version at least 1.4.6...

WPS Limit Login <= 1.4.5 - Multiple Issues

Protection Bypass, Stored XSS...

Trellix: Vulnerability Report: NO RATE LIMIT Password RESET

A vulnerability was found where there was no limit to the number of password reset requests that could be sent to a user. This could allow an attacker who obtained a user's session to send an unlimited number of OTPs to the user, potentially leading to denial of service...

DEBIAN-CVE-2019-12467

MediaWiki through 1.32.1 has Incorrect Access Control issue 1 of 3. A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

DEBIAN-CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

Code injection

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

WordPress Limit Login Attempts Plugin Authentication Bypass

An authentication bypass vulnerability exists in WordPress Limit Login Attempts Plugin. Successful exploitation of this vulnerability allows remote attackers to bypass authentication and the rate limiting service...

The vulnerability of the information protection system against unauthorized access is caused by an operation that goes beyond the buffer boundaries in memory, allowing a intruder to trigger a service failure.

The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...

DEBIAN-CVE-2019-13164

qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name obtained from bridge.conf or a --br=bridge option is limited to the IFNAMSIZ size, which can lead to an ACL bypass...

Qualys Cloud Platform (VM, PC) 8.20 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.20, includes several new features in Qualys Cloud Platform and additional support for multiple technologies in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platform Configure Password Expiration Notification – Now users...

June 27, 2019 — KB4502584 Cumulative Update for .NET Framework 3.5, 4.8 for Windows 10, version 1903 and Windows Server 1903 RTM

None None...

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...

Limitation of 256 characters only for TUNNEL_EXCLUDE_DOMAINS client property

When we try to add TUNNELEXCLUDEDOMAINS client property, it limits only for 256 characters. Due to which we cannot add extra domains apart from default ones. Default list:...