WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-05299)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS version 4.1.0 cross-site scripting vulnerability, remote attackers can use the /index.php?m=message&f=message&v=add URL's 'setiframe' parameter to use the vulnerability to inject...

GNU gettext 'default_add_message' function double release vulnerability

GNU gettext is an open source package for writing multilingual programs developed by the GNU Project. A double release vulnerability exists in the 'defaultaddmessage' function of the read-catalog.c file in GNU gettext version 0.19.8. No details of the vulnerability are provided at this time...