9844 matches found
Intel Distribution for GDB Privilege Escalation
The vulnerability in the set of development libraries for Intel Distribution for GDB is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n
vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...
CVE-2024-52809
vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to "createI18n" or "useI18n". When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in...
How Python Software Development Enhances Cyber Defense
Python has emerged as a powerful ally in combating rising cybersecurity threats and tracking cybercrime through tools leveraging…...
WS-2023-0015
CakePHP vulnerable to Cross-site Scripting in some development error pages...
vue-i18n 跨站脚本漏洞
vue-i18n is an application from intlify open source. A cross-site scripting vulnerability exists in vue-i18n, which stems from the fact that vue-i18n can pass locale information to createI18n or useI18n. When generating a locale information AST in development mode, this could lead to a cross-site...
Denial of Service Vulnerability in XunRuiCMS of Sichuan Xunruiyun Software Development Co.
XunRuiCMS is a content management framework based on CodeIgniter4. Sichuan XunRuiCloud Software Development Co., Ltd. XunRuiCMS has a denial-of-service vulnerability that can be exploited by an attacker to cause the contents of a file to be emptied, resulting in a denial of service...
CVE-2024-52809: Improper Neutralization of Input During Web Page Generation
vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...
PT-2024-35457 · Vue-I18N · Vue-I18N
Name of the Vulnerable Software and Affected Versions: vue-i18n versions prior to 9.14.2 vue-i18n versions prior to 10.0.5 Description: The issue concerns a Cross-site Scripting XSS attack possibility in vue-i18n, an internationalization plugin for Vue.js. This occurs when locale message ASTs are...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release
Red Hat OpenShift Dev Spaces 3.17 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. This includes fixes to Critical CVE-2024-21534. Following the Red Hat Product Security standards this update is rated as having a security impact of...
CVE-2024-53261 Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS." The files...
@sveltejs/kit vulnerable to XSS on dev mode 404 page
Summary "Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS." Details Source of potentially tainted data is in packages/kit/src/exports/vite/dev/index.js, line 437. This...
GHSA-RJJV-87MX-6X3H @sveltejs/kit vulnerable to XSS on dev mode 404 page
Summary "Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS." Details Source of potentially tainted data is in packages/kit/src/exports/vite/dev/index.js, line 437. This...
PT-2024-35699
Name of the Vulnerable Software and Affected Versions SvelteKit versions prior to 2.8.3 Description Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS. The files...
Why New York is a Prime Location for Leading Mobile Development Agencies
New York, the city that never sleeps, is renowned as a global epicentre for innovation, creativity, and business…...
Panda Security Dome 安全漏洞
Panda Security Dome is an antivirus product for ransomware and spyware from the Spanish company Panda Security. A security vulnerability exists in Panda Security Dome that stems from a lack of proper permission settings for folders created by the Hydra Sdk Windows service, which could allow a loc...
CVE-2018-9477
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2018-9477: Missing Authorization
In the development options section of the Settings app, there is a possible authentication bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
PT-2024-10711 · Unknown · Settings App
Name of the Vulnerable Software and Affected Versions: Settings app affected versions not specified Description: The issue is related to a possible authentication bypass in the development options section of the Settings app due to a missing permission check. This could lead to local escalation o...
