PYSEC-2024-272

Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All...

@baseline-ui/app (0.22.1), @baseline-ui/core (0.22.1) +109 more potentially affected by CVE-2024-47061 via @udecode/plate-core (>=22.0.0, <=36.3.9)

@udecode/plate-core NPM version =22.0.0, =3.11.0, =0.1.0, =5.1.1, =0.0.1, =0.0.1, =0.0.2, =12.0.0-beta.405, =0.34.0, =0.9.7, =0.0.23, =0.2.8, =0.3.45 and more Source cves: CVE-2024-47061 Source advisory: OSV:GHSA-73RG-F94J-XVHX...

PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.388. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can...

Galaxy 跨站脚本漏洞

Galaxy is an open source platform for FAIR data analysis open-sourced by the Galaxy Project. A cross-site scripting vulnerability exists in Galaxy versions prior to 24.1.1, which stems from an attacker being able to trick a user into executing arbitrary javascript code when the user is visually...

Plate 跨站脚本漏洞

Plate is an open source rich text editor for Udecode. Plate suffers from a cross-site scripting vulnerability that stems from susceptibility to cross-site scripting XSS and information disclosure attacks...

PDF-XChange Editor < 10.4.0.387 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.387. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the parsing of XPS files. The issue results from the lack of proper validation of user-supplied data, which can...

PDF-XChange Editor Installed (Windows)

Binary data pdfxchangeeditorinstalled.nbin...

PT-2024-29883 · Galaxy · Galaxy

Name of the Vulnerable Software and Affected Versions: Galaxy versions prior to the latest patched version Description: The issue concerns the editor visualization, specifically the "/visualizations" endpoint, which can be used to store HTML tags and trigger javascript execution upon an edit...

Malicious code in dmn-editor-envelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea2a6739abd5713f936e329c35aab9e44e6296aa0998b622c48217a3c1fbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8916 Malicious code in dmn-editor-envelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea2a6739abd5713f936e329c35aab9e44e6296aa0998b622c48217a3c1fbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

htmly 2.9.9 Cross Site Scripting

Exploit Title: Stored XSS in "Edit Profile" - htmlyv2.9.9 Date: 9/2024 Exploit Author: Andrey Stoykov Version: 2.9.9 Tested on: Ubuntu 22.04 Blog: https://msecureltd.blogspot.com/2024/09/friday-fun-pentest-series-11-stored-xss.html Stored XSS 1: Steps to Reproduce: 1. Login as author 2. Browse to...

Malicious code in bamoe-standalone-dmn-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c3fc2574b1213e8be16df20d0fb4a2864fc9c911ce6f2be5cba0d0580c2f516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of Adobe Illustrator’s graphic editor lies in its numerical loss of significance, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

Amazon Linux 2 : firefox (ALASFIREFOX-2024-030)

The version of firefox installed on the remote host is prior to 115.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-030 advisory. Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be...

Cross Site Scripting(XSS)

Decidim is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to improper validation and sanitization of HTML content in the QuillJS WYSIWYG editor, which allows attackers to inject malicious code, such as an XSS payload, before the content is uploaded to the server...

The vulnerability of the do_search() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dosearch function in the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...