914 matches found
GHSA-GPFJ-4J6G-C4W9 Clipboard-based DOM-XSS
Impact A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown library. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its innerHTML property without any sanitization, resulting in improper execution of...
DEBIAN-CVE-2021-32809
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
UBUNTU-CVE-2021-32809
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
CVE-2021-32809 Arbitrary HTML injection vulnerability in ckeditor
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
PT-2021-21820
Name of the Vulnerable Software and Affected Versions @github/paste-markdown versions prior to 0.3.4 Description A self Cross-Site Scripting issue exists in the @github/paste-markdown library. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is...
PT-2021-6524
Name of the Vulnerable Software and Affected Versions CKEditor versions 4.5.2 through 4.16.1 CKEditor 4 plugins with clipboard plugin dependency versions 4.5.2 and later, including: clipboard pastetext pastetools widget uploadwidget autolink tableselection Description The issue is related to...
CKEditor 跨站脚本漏洞
CKEditor is an open source, web-based text editor. A cross-site scripting vulnerability in the CKEditor 4 Clipboard package allows users to abuse the paste function with malformed HTML, which could result in injecting arbitrary HTML into the editor...
CVE-2021-37700: Improper Neutralization of Input During Web Page Generation
@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...
paste-markdown 跨站脚本漏洞
paste-markdown is a paste Markdown object. A cross-site scripting vulnerability exists in paste-markdown versions prior to 0.3.4, which stems from dynamically creating a div if the clipboard data contains the string and copying the clipboard content into its innerHTML attribute without any cleanu...
CVE-2021-32809: Improper Control of Generation of Code
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...
New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits
A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet Information Services IIS servers to infiltrate their networks...
kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c
A use-after-free flaw was found in the Linux kernel console driver when using the copy-paste buffer. This flaw allows a local user to crash the system...
kernel: use-after-free in n_tty_receive_buf_common function in drivers/tty/n_tty.c
A use-after-free flaw was found in the Linux kernel console driver when using the copy-paste buffer. This flaw allows a local user to crash the system...
CVE-2021-31701
Mintty before 3.4.7 mishandles Bracketed Paste Mode...
CVE-2021-31701
Mintty before 3.4.7 mishandles Bracketed Paste Mode...
CVE-2021-31701
Mintty before 3.4.7 mishandles Bracketed Paste Mode...
Code injection
Mintty before 3.4.7 mishandles Bracketed Paste Mode...
CVE-2021-31701
Mintty before 3.4.7 mishandles Bracketed Paste Mode. The issue affects Mintty (terminal emulator) with versions older than 3.4.7 due to incorrect handling of bracketed paste sequences, as documented across multiple sources (NVD entry and vendor reports). Impact details are not elaborated beyond t...
