CVE-2024-55950

Tabby (formerly Terminus) prior to version 1.0.216 is affected by a vulnerability caused by overly permissive entitlements that enable dangerous capabilities (camera, microphone, and access to personal folders) through Apple Events, plus entitlements that can permit code injection. The root cause...

Status Board Cross-Site Scripting Vulnerability

Status Board is a Nodejs-based dashboard framework. A cross-site scripting vulnerability exists in Status Board version 1.1.81, which can be exploited by an attacker to execute client-side code...