CVE-2024-39031

CVE-2024-39031 : Silverpeas Core Stored XSS in in Mes agendas Informazioni Descrizione: In Mes Agendas, un utente può creare nuovi eventi e aggiungerli al proprio calendario. Inoltre, gli utenti possono invitare altri dello stesso dominio, inclusi gli amministratori, a questi eventi. Un utente...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS when inviting users to an event. An attacker can execute arbitrary web script or inject HTML by supplying crafted input into the First Name, Middle text, or Last Name fields. Details Cross-site scripting or XSS ...

New PDF Attack Targets Aviation Defense Industry

FireEye reported today it had detected a new critical PDF attack targeting the aviation defense industry. Malware Page exploits a stack-based buffer overflow vulnerability in Adobe Acrobat and Adobe Reader. An attacker would be able to execute code remotely via a crafted argument to the getIcon...