phpMyFAQ Stored Cross-site Scripting at File Attachments

Summary An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS attacks. Details When attachments are uploaded without an extension, the application renders it as HTML by default. Therefore...

phpMyFAQ Path Traversal in Attachments

Summary There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. PoC 1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\hacked 2. When the above is set...

GHSA-MMH6-5CPF-2C72 phpMyFAQ Path Traversal in Attachments

Summary There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. PoC 1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\hacked 2. When the above is set...

DEBIAN-CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

AZL-37106 CVE-2024-30204 affecting package emacs for versions less than 29.3

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

UBUNTU-CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

PT-2024-22799 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.2.6 Description: There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This issue can be exploited by remote...

CVE-2024-30204

In Emacs versions prior to 29.3 , LaTeX preview is enabled by default for e-mail attachments. This configuration flaw allows for potential security risks when handling untrusted content. The vulnerability is mitigated by ensuring that LaTeX preview is disabled for e-mail attachments when untruste...

PT-2024-23253

Name of the Vulnerable Software and Affected Versions Emacs versions prior to 29.3 Description The issue is related to LaTeX preview being enabled by default for e-mail attachments in Emacs. This could potentially allow attackers to execute remote code. There is no information provided about the...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

Emacs 安全漏洞

Gnu emacs is a family of text editors in the American GNU community. Gnu emacs suffers from a security vulnerability that stems from enabling LaTeX preview for email attachments by default. No details of the vulnerability are provided at this time...

CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments...

PT-2024-2371 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions 8.1 and later Description: The issue is related to the lack of protection for the web page structure, allowing an attacker to conduct cross-site scripting XSS attacks using specially crafted .html files. An attacker with adm...

The vulnerability of the Kiwi TCMS testing system lies in its ability to allow unlimited loading of dangerous types of files. This allows attackers to upload arbitrary attachments to testing plans and test scenarios.

The vulnerability of the Kiwi TCMS testing system lies in its ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to upload arbitrary attachments to testing plans and test scenarios remotely...

The vulnerability of the Kiwi TCMS testing system lies in the lack of measures to protect the website structure. This allows attackers to upload arbitrary attachments to testing plans and test scenarios.

The vulnerability of the Kiwi TCMS testing system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary attachments to testing plans and test scenarios...