8269 matches found
PT-2024-22360
Name of the Vulnerable Software and Affected Versions: KaTeX versions prior to 0.16.10 Description: KaTeX is a JavaScript library for TeX math rendering on the web. Users who render untrusted mathematical expressions could encounter malicious input using includegraphics that runs arbitrary...
CVE-2024-30205
The GNU Emacs text editor contains a vulnerability where Org mode treats the contents of remote files as trusted. This affects Org Mode versions prior to 9.6.23 and Emacs versions before 29.3 . The root cause is the loading of code without checking its integrity, which could allow an attacker to ...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-30205
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-28246: Incomplete List of Disallowed Inputs
KaTeX is a JavaScript library for TeX math rendering on the web. Code that uses KaTeX's trust option, specifically that provides a function to blacklist certain URL protocols, can be fooled by URLs in malicious inputs that use uppercase characters in the protocol. In particular, this can allow fo...
Emacs 安全漏洞
Gnu emacs is a family of text editors in the American GNU community. Gnu emacs suffers from a security vulnerability that stems from the Org model that assumes the contents of remote files are trusted. No details of the vulnerability are provided at this time...
KaTeX 安全漏洞
KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. A security vulnerability previously present in KaTeX v0.16.10 stems from code that uses KaTeX's trust option, specifically code that provides the ability to blacklist certain URL protocols, which may be spoofed by...
CVE-2024-30205
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23...
Implementing Zero Trust Controls for Compliance
The ThreatLocker® Zero Trust Endpoint Protection Platform implements a strict deny-by-default, allow-by-exception security posture to give organizations the ability to set policy-based controls within their environment and mitigate countless cyber threats, including zero-days, unseen network...
Citrix Provisioning Services Target Device Displays Incorrect Windows Time
Target Devices may display the incorrect time. The Device time differs from that of the domain controllers. The symptoms can vary but include: 1. The inability to login to the Target Device 2. The Device domain Trust Relationship breaks. 3. VDA registration continues to fail...
Tenda AC15 跨站请求伪造漏洞
Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a cross-site request forgery...
Akamai Customer Trust Built on Partnership and Best User Experience
...
Chirp Access Trust Management Issues Vulnerability
Chirp Systems Chirp Access is a feature or service from Chirp Systems that helps users access and manage their Chirp accounts. Chirp Access suffers from a trust management issue vulnerability that stems from storing credentials in its source code, which could expose sensitive information to an...
Navigating Evolving Cybersecurity: Recent Trends and Future Outlook
“Those who fail to learn from history are doomed to repeat it." - Winston Churchill While Churchill may not have been the first person to use a variation of this quote, the essence of its meaning rang true then and still does today. In this spirit, and so that we may collectively learn and evolve...
Cisco Third-Generation IP Phone CTL Trust Chain Enforcement (CVE-2014-0737)
The Cisco Unified IP Phone 7960G 9.21 and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file, aka Bug ID CSCuj66795. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Earth Krahang Exploits Intergovernmental Trust to Launch Cross-Government Attacks
Since early 2022, we have been monitoring an APT campaign that targets several government entities worldwide, with a strong focus in Southeast Asia, but also seen targeting Europe, America, and Africa...
Delinea PAM Secret Server Trust Management Issue Vulnerability
Delinea PAM Secret Server is a key service manager from Delinea. A trust management issue vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to obtain symmetric keys and sensitive information via a crafted payload...
Interpretation Differences
net/mail in GO is vulnerable to Interpretation Differences. The vulnerability is due to the ParseAddressList function incorrectly handling comments text within parentheses inside display names. The parser handles the display names different then conforming address parsers, which could result in...
HALO 2.13.1 CORS Issue
Title: HALO-2.13.1 Cross-origin resource sharing: arbitrary origin trusted Author: nu11secur1ty Date: 03/15/2024 Vendor: https://www.halo.run/ Software: https://github.com/halo-dev/halo Reference: https://portswigger.net/web-security/cors Description: The application implements an HTML5...