[SECURITY] Fedora 37 Update: git-2.40.1-1.fc37

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

The Tragic Fallout From a School District’s Ransomware Breach

Plus: Cyber Command’s disruption of Iranian election hacking, an exposé on child sex trafficking on Meta’s platforms, and more...

Meta Platforms Lexical Cross-Site Scripting Vulnerabilities

Meta Platforms Lexical is an extensible JavaScript web text editor framework from Meta Platforms, Inc. A security vulnerability exists in Meta Platforms Lexical versions prior to v0.10.0 that originates from allowing cross-site scripting attacks on link clicks while parsing input from an untruste...

Design/Logic Flaw

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...

CVE-2023-30857 @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...

CVE-2023-30857

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version "0.6.1", there is a possible prototype pollution issue for the "MetadataRecord", when merged with a base class' metadata object, in "meta" decorator from the "@aedart/support" package...

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...

CVE-2023-30857: Improperly Controlled Modification of Object Prototype Attributes

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...

PT-2023-23013 · Unknown · @Aedart/Support

Name of the Vulnerable Software and Affected Versions: @aedart/support versions prior to 0.6.1 Description: The issue concerns a possible prototype pollution for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The likelihood ...

Fedora: Security Advisory for kernel (FEDORA-2023-4f2cf7e5d2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: kernel-6.2.12-100.fc36

The kernel meta package...

[SECURITY] Fedora 37 Update: kernel-6.2.12-200.fc37

The kernel meta package...

CVE-2023-22718

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

CVE-2023-22718

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

CVE-2023-22718

The CVE-2023-22718 entry describes a Reflected XSS in the WordPress plugin User Meta Manager (versions <= 3.4.9). The underlying issue is insufficient sanitisation/escaping of user-controlled input, leading to reflected payloads in the admin/page context. Affected product/component: WordPress ...

CVE-2023-22718 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

CVE-2023-22718 WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

CVE-2023-22718

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...

CVE-2023-22718: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in Jason Lau User Meta Manager plugin = 3.4.9 versions...