CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui

parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...

CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui

parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...

CVE-2024-5125 XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui

parisneo/lollms-webui version 9.6 is vulnerable to Cross-Site Scripting XSS and Open Redirect due to inadequate input validation and processing of SVG files during the upload process. The XSS vulnerability allows attackers to embed malicious JavaScript code within SVG files, which is executed upo...

CVE-2024-5125

CVE-2024-5125 affects parisneo/lollms-webui version 9.6, where SVG processing during file upload enables two issues: Cross‑Site Scripting (XSS) and Open Redirect. The root cause is inadequate input validation and handling of SVG files in the upload flow, allowing embedded JavaScript execution and...

Fedora 38 : golang-github-docker-distribution (2022-59cb9da3d4)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-59cb9da3d4 advisory. Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc38. Changelog Sun Aug 21 2022 Robert-Andr Mauchin 2.8.1-2 - Upda...

Action Dispatch Component Ruby DoS

The vulnerability of the Action Dispatch component in the Action Pack extension’s Ruby interpreter involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Intel Distribution for GDB Uncontrolled Search Path Privilege Escalation

The vulnerability in the set of development libraries for Intel Distribution for GDB software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to increase their privileges...

Kerberos KDC Proxy Protocol Code Execution

The vulnerability of the Kerberos Key Distribution Center KDC Proxy Protocol implementation in Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fedora 37 : golang-github-distribution-3 (2022-741325e9a0)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-741325e9a0 advisory. Update to 3.0.0 pre1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

CVE-2024-32048

Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29083

CVE-2024-29083 concerns Intel® Distribution for Python software before version 2024.2, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The advisory and related records describe affected product: Intel Distribution for Python before 2024...

CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Distribution for Python 安全漏洞

Intel Distribution for Python is a Python distribution from Intel Corporation USA optimized for Intel hardware. A security vulnerability exists in Intel Distribution for Python versions prior to 2024.2, which stems from incorrect default permissions. An attacker can exploit the vulnerability to...

CVE-2024-32048: Improper Input Validation

Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-29083: Incorrect Default Permissions

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-43639

Windows KDC Proxy Remote Code Execution Vulnerability...

LodaRAT: Established Malware, New Victim Patterns

Executive Summary Rapid7 has observed an ongoing malware campaign involving a new version of LodaRAT. This version possesses the ability to steal cookies and passwords from Microsoft Edge and Brave. LodaRAT, first observed in 2016, is a remote access tool RAT written in AutoIt. Development of...

[BSA-120] Security Update for mosquitto

Philippe Coval uploaded new packages for mosquitto which fixed the following security problems: CVE-2024-8376 In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT",...