CVE-2019-17071

The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...

Cross site scripting

The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...

CVE-2019-17071

The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...

CVE-2019-17071

The CVE-2019-17071 entry concerns the WordPress Client Dash plugin (version 2.1.4) which is vulnerable to Cross-Site Scripting (XSS). Connected documents detail that this vulnerability is a stored XSS via admin settings, exploitable by authenticated attackers with administrator-level privileges (...

CVE-2019-17071: Improper Neutralization of Input During Web Page Generation

The client-dash aka Client Dash plugin 2.1.4 for WordPress allows XSS...

PT-2019-14937

Name of the Vulnerable Software and Affected Versions Client Dash plugin version 2.1.4 Description The issue allows for cross-site scripting XSS, which is a type of attack that can be used to steal user data or take control of user sessions. Recommendations For Client Dash plugin version 2.1.4,...

CVE-2016-1573

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

CVE-2016-1573

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

Code injection

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

CVE-2016-1573

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

CVE-2016-1573

CVE-2016-1573 affects Unity8 before 8.11+16.04.20160122-0ubuntu1. The vulnerability arises from plugins/Dash/CardCreator.js where a specially crafted fallback art property supplied by a scope can cause code execution. In the CVE context, this allows arbitrary QML code execution within the unity8-...

CVE-2016-1573: Use After Free

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope...

PT-2019-7810

Name of the Vulnerable Software and Affected Versions Unity8 versions prior to 8.11+16.04.20160122-0ubuntu1 Description The issue allows execution of arbitrary code when a fallback image supplied by a scope is used in place of a legitimate image. This is due to a flaw in the file...

Design/Logic Flaw

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

CVE-2019-11070

WebKitGTK/WebKitGTK4 (webkitgtk4) is affected by CVE-2019-11070. The issue arises from WebKitGTK and WPE WebKit prior to 2.24.1 failing to apply configured HTTP proxy settings when downloading livestream video (HLS/DASH/Smooth Streaming), leading to potential deanonymization. Remediation in the c...

CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

CVE-2019-11070

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

New GandCrab Decryptor Unlocks Files of Updated Ransomware

Yet another free decryptor is available for GandCrab ransomware victims. The tool, released Tuesday, is the third decryptor update in the past year that thwarts the prolific and fast-evolving GandCrab ransomware. Europol police announced availability of the update, which now unlocks data encrypte...

git clone Code Execution

The vulnerability of the “git clone” function in a distributed version control system like Git is related to the improper handling of the recursive “git clone” command applied to a supersource project where the .gitmodules file contains an field with a URL starting with the symbol “-”. Exploiting...

#OTTuesday: Who Wins in a Format War - A Chat with Encoding.com

If you asked anyone 10 years ago who the winner would be in the over online video formats, you would have heard some strong opinions -- and some incorrect predictions. Video standards and formats will continue to change as long as users demand new ways to view content. AkamaiTV's Nelson Rodriguez...