PT-2024-39676 · WordPress · Wp Users Masquerade

Name of the Vulnerable Software and Affected Versions: WP Users Masquerade plugin for WordPress versions up to, and including, 2.0.0 Description: The issue is due to incorrect authentication and capability checking in the ajax masq login function, allowing authenticated attackers with...

Cisco Expressway Edge Improper Authorization (cisco-sa-expressway-auth-kdFrcZ2j)

According to its self-reported version, Cisco Expressway Edge Improper Authorization is affected by a vulnerability. - A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due...

CVE-2024-20497

Cisco Expressway Edge (Expressway-E) is affected by an improper authorization vulnerability. An authenticated MRA user can masquerade as another user and potentially intercept calls or spoof caller IDs due to inadequate authorization checks for Mobile and Remote Access users. Exploitation require...

Cisco Expressway Edge 安全漏洞

Cisco Expressway Edge Cisco Expressway-E is a secure access application from Cisco USA. Cisco Expressway Edge suffers from an authorization issue vulnerability that stems from insufficient authorization checks for mobile and remote access users, which can be exploited by an authenticated remote...

CVE-2024-39717

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. Tenant level users do not have this privilege. The “Change Favicon” Favorite Icon...

Versa Director 代码问题漏洞

Versa Director is a virtualization and service creation platform from Versa USA. It simplifies the creation, automation and delivery of services using Versa FlexVNF. A code issue vulnerability exists in Versa Director that stems from a misuse of the Change Favorite Icon option, which can lead to...

PT-2024-6523 · Cisco · Cisco Expressway Edge

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Edge Expressway-E affected versions not specified Description: A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This issu...

CVE-2024-33550

Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This issue affects WP Masquerade: from n/a through 1.1.0...

CVE-2024-33550 WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This issue affects WP Masquerade: from n/a through 1.1.0...

CVE-2024-33550

CVE-2024-33550 affects the WordPress WP Masquerade plugin (versions n/a–1.1.0). The issue is an Improper Privilege Management vulnerability enabling Privilege Escalation by authenticated users (Subscriber+). Public exploit details are not provided in the documents beyond the authenticated account...

CVE-2024-33550 WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This issue affects WP Masquerade: from n/a through 1.1.0...

WordPress plugin WP Masquerade 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Masquerade plugin <= 1.1.0 - Authenticated Account Takeover vulnerability

Authenticated Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WP Masquerade versions = 1.1.0...

WordPress WP Masquerade Plugin <= 1.1.0 is vulnerable to Privilege Escalation

Software WP Masquerade Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-33550 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 711ee525c5d1 Credits Rafie...

PT-2024-23114 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: ZITADEL versions prior to 2.42.17 ZITADEL versions 2.42.17 through 2.48.3 Description: ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker could upload HTML and pretend it i...

masquerade-proxy (=0.1.0), monoio-quiche (=0.0.1) +3 more potentially affected by CVE-2024-1765 via quiche (>=0.10.0 <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio =0.1.0 - quiver-h3 =0.1.0 Source cves: CVE-2024-1765 Source advisory: OSV:GHSA-78WX-JG4J-5J6G...

masquerade-proxy (=0.1.0), monoio-quiche (=0.0.1) +3 more potentially affected by CVE-2024-1410 via quiche (>=0.10.0 <=0.18.0)

quiche CARGO version =0.10.0, =0.1.0, =0.6.9 - quiche-tokio =0.1.0 - quiver-h3 =0.1.0 Source cves: CVE-2024-1410 Source advisory: OSV:GHSA-XHG9-XWCH-VR7X...

Statamic Cross-Site Scripting Vulnerability

Statamic is a powerful flat file Cms built on Laravel by Statamic, Inc. for storing all content, templates, assets, and settings in files instead of a database. A cross-site scripting vulnerability exists in Statamic that stems from an attacker being able to craft and upload HTML files that look...

masquerade-proxy (=0.1.0), monoio-quiche (=0.0.1) +2 more potentially affected by CVE-2023-6193 via quiche (>=0.16.0 <=0.18.0)

quiche CARGO version =0.16.0, =0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on quiche and may be impacted: - masquerade-proxy =0.1.0 - monoio-quiche =0.0.1 - quiche-tokio =0.1.0 - quiver-h3 =0.1.0 Source cves: CVE-2023-6193 Source advisory:...

CVE-2023-20519

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...