CVE-2025-24893

Preuve de concept XWiki CVE-2025-24893 Auteurs : Net.Doge & Infinit3i Ce script Python exploite CVE-2025-24893 , une vulnérabilité d'exécution de code à distance RCE dans XWiki causée par un sandboxing inadéquat dans les macros Groovy exécutées de manière asynchrone. Il permet l'exécution de...

Lazy async SVG rasterisation

Phwoar I love a good sciency-sounding title. SVG can be slow When transforming an SVG image, browsers try to render on every frame to keep the image as sharp as possible. Unfortunately SVG rendering can be slow, especially for non-trivial images. Here's a demo, press "Scale SVG". Devtools timelin...

openSUSE Security Update : Mozilla Firefox (openSUSE-2016-1271)

Mozilla Firefox was updated to 49.0.2 to fix two security issues and some bugs. The following vulnerabilities were fixed : - CVE-2016-5287: Crash in nsTArraybase bsc1006475 - CVE-2016-5288: Web content can read cache entries bsc1006476 The following changes and fixes are included : - Asynchronous...