1657 matches found
CVE-2024-2266
A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /login.php of the component Login Page. The manipulation of the argument emailcookie/passwordcookie leads to cross site scripting. The attac...
CVE-2024-2266 keerti1924 Secret-Coder-PHP-Project Login Page login.php cross site scripting
A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /login.php of the component Login Page. The manipulation of the argument emailcookie/passwordcookie leads to cross site scripting. The attac...
CVE-2024-2266
CVE-2024-2266 affects keerti1924 Secret-Coder-PHP-Project 1.0, specifically the Login Page file /login.php. The vulnerability is caused by improper handling of the parameters emailcookie and passwordcookie, enabling remote cross-site scripting (XSS) . Exploitation is possible remotely and the exp...
CLSA-2024-1709839850 Fix CVE(s): CVE-2023-5341
SECURITY UPDATE: Heap use-after-free flaw in BMP coder - debian/patches/CVE-2023-5341.patch: Check BMP file size to fix ImproperImageHeader issue caused by a provided poc - CVE-2023-5341...
CVE-2024-2266: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /login.php of the component Login Page. The manipulation of the argument emailcookie/passwordcookie leads to cross site scripting. The attac...
PT-2024-19523 · Unknown · Keerti1924 Secret-Coder-Php-Project
Name of the Vulnerable Software and Affected Versions: keerti1924 Secret-Coder-PHP-Project version 1.0 Description: A vulnerability has been found in the Login Page component, specifically in the file /login.php. The manipulation of the emailcookie and passwordcookie arguments leads to cross-site...
Secret-Coder-PHP-Project Cross-Site Scripting Vulnerability
Secret-Coder-PHP-Project is a PHP-based project. keerti1924 A cross-site scripting vulnerability exists in version 1.0 of Secret-Coder-PHP-Project, which stems from a cross-site scripting XSS vulnerability in the parameters emailcookie/passwordcookie in the file /login.php of the component Login...
CVE-2024-27918 Coder's OIDC authentication allows email with partially matching domain to register
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...
CVE-2024-27918 Coder's OIDC authentication allows email with partially matching domain to register
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...
CVE-2024-27918 Coder's OIDC authentication allows email with partially matching domain to register
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...
CVE-2024-27918
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the "CODEROIDCEMAILDOMAIN" verification and create an account with an email not in the...
CVE-2024-27918
Coder’s CVE-2024-27918 describes an OIDC authentication flaw where the CODER_OIDC_EMAIL_DOMAIN verification can be bypassed, allowing registration/login with emails not on the allowlist when using public OIDC providers. Affected are Coder instances with OIDC enabled and domain-based allowlists, w...
CVE-2024-27918: Improper Input Validation
Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the...
GHSA-7CC2-R658-7XPF Coder's OIDC authentication allows email with partially matching domain to register
Summary A vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the allowlist. Deployments are only affected if the OIDC provider allows users to create accounts on the provider such as publi...
Coder's OIDC authentication allows email with partially matching domain to register
Summary A vulnerability in Coder's OIDC authentication could allow an attacker to bypass the CODEROIDCEMAILDOMAIN verification and create an account with an email not in the allowlist. Deployments are only affected if the OIDC provider allows users to create accounts on the provider such as publi...
graphicsmagick:coder_JXL_fuzzer: Heap-buffer-overflow in jxl::ColorCorrelationMap::ColorCorrelationMap
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6044032358744064 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJXLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...
graphicsmagick:coder_BIE_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea
Detailed Report: https://oss-fuzz.com/testcase?key=6299004346171392 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIEfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportViewPixelArea...
DEBIAN-CVE-2023-5341
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick...
