4762 matches found
GHSA-WWXH-74FX-33C6 Possible prototype pollution in metadata record, when using meta decorator
Impact Possible prototype pollution for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The likelihood is questionable, given that a class' metadata can only be set or altered when the class is decorated via meta. Furthermore...
[SECURITY] Fedora 37 Update: git-2.40.1-1.fc37
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
The Tragic Fallout From a School District’s Ransomware Breach
Plus: Cyber Command’s disruption of Iranian election hacking, an exposé on child sex trafficking on Meta’s platforms, and more...
Meta Platforms Lexical 跨站脚本漏洞
Meta Platforms Lexical is an extensible JavaScript web text editor framework from Meta Platforms, Inc. A security vulnerability exists in Meta Platforms Lexical versions prior to v0.10.0 that originates from allowing cross-site scripting attacks on link clicks while parsing input from an untruste...
Design/Logic Flaw
@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...
CVE-2023-30857 @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator
@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...
PT-2023-23013 · Unknown · @Aedart/Support
Name of the Vulnerable Software and Affected Versions: @aedart/support versions prior to 0.6.1 Description: The issue concerns a possible prototype pollution for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The likelihood ...
Fedora: Security Advisory for kernel (FEDORA-2023-4f2cf7e5d2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: kernel-6.2.12-100.fc36
The kernel meta package...
[SECURITY] Fedora 37 Update: kernel-6.2.12-200.fc37
The kernel meta package...
CVE-2023-22718
Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...
CVE-2023-22718
Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...
Cross site scripting
Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...
CVE-2023-22718 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)
Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...
CVE-2023-22718
The CVE-2023-22718 entry describes a Reflected XSS in the WordPress plugin User Meta Manager (versions <= 3.4.9). The underlying issue is insufficient sanitisation/escaping of user-controlled input, leading to reflected payloads in the admin/page context. Affected product/component: WordPress ...
CVE-2023-22718 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)
Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...
WordPress Plugin User Meta Manager 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
US Facebook users can now claim Cambridge Analytica settlement cash
US-based Facebook users can now claim a piece of the enormous settlement payment by Meta, Facebook's parent company, over the Cambridge Analytica scandal. This news follows Meta agreeing to pay $725 million in December 2022 to settle the longstanding class action lawsuit filed by Lauren Price in...
CVE-2023-1473
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...