1274 matches found
Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, vulnerabilites related to CORS misconfiguration and Certificate Pinning have been...
The vulnerability of the path.evaluate() or path.evaluateTruthy() function in the compiler for writing Babel JavaScript code allows a malicious actor to execute arbitrary code.
The vulnerability of the path.evaluate or path.evaluateTruthy function of the compiler for writing Babel JavaScript code is related to improper comparison. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20241001-16
The compiler vulnerability for writing Babel JavaScript code is related to the use of plugins that rely on Babel's internal path.evaluate or path.evaluateTruthy methods. Exploitation of the of the vulnerability could allow an attacker to execute arbitrary code...
RHSA-2021:4201 Red Hat Security Advisory: babel security and bug fix update
Bulletin has no description...
Malicious code in babel-preset-current-node-syntax (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 227436e7c8f26da0ff88db12bd9102d85f9f596cf495b6e9192c634d275a5686 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
MAL-2025-6460 Malicious code in babel-preset-current-node-syntax (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 227436e7c8f26da0ff88db12bd9102d85f9f596cf495b6e9192c634d275a5686 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
CVE-2024-27728
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...
PT-2024-22011 · Friendica · Friendica
Name of the Vulnerable Software and Affected Versions: Friendica version 2023.12 Description: The issue allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. This is a Cross Site Scripting issue. Recommendations: For Friendica version 2023.12,...
CVE-2024-27728
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...
CVE-2024-27728
Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...
CVE-2024-27728
CVE-2024-27728 is a Cross Site Scripting vulnerability affecting Friendica version 2023.12. The issue allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. Several sources (NVD, Red Hat, OSV, CVE list entries, and PT Security) corroborate this...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to arbitrary code execution during compilation due to traverse ( CVE-2023-45133 )
Summary Package traverse is used by IBM Cloud Pak for Data. CVE-2023-45133. Vulnerability Details CVEID:CVE-2023-45133 DESCRIPTION: Babel could allow a local attacker to execute arbitrary code on the system, caused by a flaw in the path.evaluateor path.evaluateTruthy. By using a specially crafted...
MAL-2024-7930 Malicious code in babel-preset-sofi-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f98a5f8b5f0da82a5cd8832e176ca57effe972fad5d0ef298183a66d9a60183 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Vulnerability of the org-babel-execute function: latex() in the text editor EMACS, allowing an attacker to execute arbitrary code
The vulnerability of the org-babel-execute:latex function in the text editor EMACS is related to the improper elimination of special elements used in the command. Exploiting this vulnerability may allow an attacker to execute arbitrary code...
OPENSUSE-SU-2024:14127-1 python310-Babel-2.14.0-1.5 on GA media
These are all security issues fixed in the python310-Babel-2.14.0-1.5 package on the GA media of openSUSE Tumbleweed...
MAL-2024-2771 Malicious code in npm_package_babel_presets_1_0 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in npm_package_babel_presets_1_0 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mall-front-babel-directive (npm)
--- -= Per source details. Do not edit below this line.=-...