Caret 跨站脚本漏洞

Caret is a software package for drawing classification and regression models. A security vulnerability exists in Caret, which stems from the fact that when it is enabled in preview mode, an attacker can implement cross-site scripting using a carefully crafted Markdown file to enable code executio...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client for Meetings prior to version 5.10.0 that stems from an inability to properly parse XML in XMPP messages, which can be exploited by an attacker to...

CVE-2016-1548

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer-dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimat...