Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress < 2.0.74 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure

Description The Radio Player plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.0.73. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive...

WordPress plugin Radio Player 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability exists ...

PT-2024-25361 · Unknown · Softlab Radio Player

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions 2.0.73 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the server to make requests to arbitrary domains, which could lea...

WordPress Radio Player Plugin <= 2.0.73 is vulnerable to Server Side Request Forgery (SSRF)

Software Radio Player Type Plugin Vulnerable versions = 2.0.73 Fixed in 2.0.74 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-33592 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3f8d09f6ac4f Credits Steven...

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference Vulnerability

Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber....

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vulnerability

Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality. The issue allows attackers to bypass authentication by manipulating the setpwd endpoint that enables th...

The vulnerability of the Radio Scheduling function in wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to execute arbitrary code.

The vulnerability of the Radio Scheduling function in Tp-Link AC1350 and Tp-Link N300 wireless access points is related to the execution of operations outside the buffer during the processing of the “action” parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary co...

The vulnerability of the Radio Scheduling function in wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to execute arbitrary code.

The vulnerability of the Radio Scheduling function in Tp-Link AC1350 and Tp-Link N300 wireless access points is related to the execution of operations outside the buffer during the processing of the profile parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...

The vulnerability of the Radio Scheduling function in wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to execute arbitrary code.

The vulnerability of the Radio Scheduling function in Tp-Link AC1350 and Tp-Link N300 wireless access points lies in the fact that the operation data is written outside the buffer in memory when processing the band parameter. Exploiting this vulnerability allows a malicious actor to execute...

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Insecure Direct Object Reference

Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.999 Revision 1243 1.317 Revision 602 1.220 Revision 1250 1.220 Revision 12481249 1.220 Revision 597 1.217 Revision 1242 1.214 Revision 1023 1.193 Revisi...

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 allows a intruder to execute arbitrary code.

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 wireless access points is related to buffer overflows in the stack when processing the “action” parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

Electrolink FM/DAB/TV Transmitter 安全漏洞

The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that originates from storing credentials in plaintext...

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 allows a intruder to execute arbitrary code.

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 wireless access points is related to buffer overflows in the stack when processing the profile parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 allows a intruder to execute arbitrary code.

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 wireless access points is related to buffer overflows in the stack when processing the ssid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 allows a intruder to execute arbitrary code.

The vulnerability of the Radio Scheduling component in the microprogramming software of Tp-Link AC1350 wireless access points is related to buffer overflows in the stack when processing the band parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...

CVE-2024-32506

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-32506 WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

CVE-2024-32506

Public details for CVE-2024-32506 are not provided in the connected documents. Technical specifics (affected plugin/version, root cause, exploitability) are not disclosed here. Monitor for updates from vendors/security advisories.

CVE-2024-32506 WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

WordPress Plugin Radio Player 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on servers running PHP and MySQL. WordPress plugin is an...