PT-2022-7057

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions 22.5.6 and earlier Adobe Photoshop versions 23.2.2 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user...

CVE-2022-27260: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file...

CVE-2022-24833

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

Cross site scripting

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

CVE-2022-24833 Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

CVE-2022-24833

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

CVE-2022-24833 Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

CVE-2022-1045

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

CVE-2022-1045

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

Cross site scripting

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

CVE-2022-1045 Stored XSS viva .svg file upload in polonel/trudesk

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

CVE-2022-1045 Stored XSS viva .svg file upload in polonel/trudesk

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

CVE-2022-1045

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

CVE-2022-1045

The CVE-2022-1045 entry relates to a Stored XSS in GitHub polonel/trudesk prior to v1.2.0, caused by insufficient filtering/escaping in the SVG file upload function. Affected component: Trudesk (SVG upload logic). Impact described in connected sources includes the ability for an attacker to injec...

CVE-2022-24833: Improper Neutralization of Input During Web Page Generation

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

PT-2022-13615

Name of the Vulnerable Software and Affected Versions trudesk versions prior to 1.2.0 Description The issue is related to a stored XSS vulnerability via .svg file upload in the trudesk GitHub repository. Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the...

PT-2022-16911

Name of the Vulnerable Software and Affected Versions PrivateBin versions prior to 1.4.0 Description A cross-site scripting XSS issue was found in PrivateBin, which is a minimalist, open source online pastebin clone. The problem arises because SVGs can contain JavaScript, allowing an attacker to...

CVE-2022-1045: Unrestricted Upload of File with Dangerous Type

Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0...

Stored XSS viva .svg file upload

Description The application allows .svg files to upload which leads to stored XSS Proof of Concept 1.Download the payload from this link:- https://drive.google.com/file/d/1c1BP5bxXBxtwLfRJTrEPgMWK1yVFDF2R/view?usp=sharing 2.Login to the application with Co-admin account and go to "Settings" -...

qt:qtsvg_svg_qsvgrenderer_render: Stack-use-after-return in QSemaphore::release

Detailed Report: https://oss-fuzz.com/testcase?key=5721153550811136 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtsvgsvgqsvgrendererrender Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Crash Address: 0x7f18f33cf460 Crash State: QSemaphore::release...