CVE-2023-38216 ZDI-CAN-21404: Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Bridge versions 12.0.4 and earlier and 13.0.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction ...

Adobe Bridge 13.x < 13.0.4 Multiple Vulnerabilities (APSB23-49)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 13.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-49 advisory. - Use After Free CWE-416 potentially leading to Memory leak CVE-2023-38216 - Out-of-bounds Read CWE-125...

Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Adobe Bridge 缓冲区错误漏洞

Adobe Bridge is a powerful creative resource manager that lets users quickly and easily preview, organize, edit, and publish multiple creative resources, edit metadata, and add keywords, tags, and ratings to material resources.Adobe Bridge uses collections to organize assets and find assets using...

Adobe Bridge 13.x < 13.0.4 Multiple Vulnerabilities (APSB23-49)

The version of Adobe Bridge installed on the remote Windows host is prior to 13.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-49 advisory. - Use After Free CWE-416 potentially leading to Memory leak CVE-2023-38216 - Out-of-bounds Read CWE-125 potentially...

Adobe Bridge 资源管理错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a Resource Management Error vulnerability that stems from the presence of uncontrolled resource consumption by the application, which can be exploited by an attacker to bypass mitigations such as ASLR...

Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

APSB23-49 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses important vulnerabilities that could lead to memory leak...

users can make multiple deposits through the same deposit nonce in branch bridge agent

Lines of code Vulnerability details Impact When a user retries the deposit there is a check that the deposit owner should be msg.sender but there is no check that the deposit failed so user can even retry successful deposits with the same nonce which can affect accounting badly Proof of Concept...

CVE-2023-40333

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

CVE-2023-40333

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

CVE-2023-40333 WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

CVE-2023-40333 WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Qode Interactive Bridge Core plugin = 3.0.9 versions...

CVE-2023-40333

CVE-2023-40333 refers to unauthenticated, reflected XSS in the WordPress Bridge Core plugin ( 3.0.9 (i.e., 3.1.0 or later). NVD lists a base score around 6.1 (Medium) with network attack vector and user interaction required. Patchstack also notes the fix in 3.1.0 and labels the vulnerability as X...

WordPress plugin bridge-core cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-27392 · Qode Interactive · Qode Interactive Bridge Core Plugin

Name of the Vulnerable Software and Affected Versions: Qode Interactive Bridge Core plugin versions = 3.0.9 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for the execution of malicious scripts on a user's browser,...

PT-2023-8795 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the drm bridge get edid function of the Linux kernel's meson component. This leak occurs on the -hpd notify callback. The EDID returned by drm...

There is no concept of a requestDeposit, requestRedeem receipt made on the source chain, resulting in no recovery proces escrowed funds in the event of bridge or Centrifuge fall.

Lines of code Vulnerability details Impact There is no kind of request receipt on the EVM chain at all. The InvenstmentManagerrequestDeposit simply puts users tokens in the escrow and then the request gets routed to the Gateway and later to the outgoingRouter. The flow goes as follows 1.Buyer cal...

CVE-2023-4039

creationtimestamp| type| source ---|---|--- 2023-09-13 12:34:52+00:00| seen| https://t.me/cibsecurity/70370 2025-08-20 15:44:36+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwtrgrwkiq2h 2025-08-20 15:44:39+00:00| seen|...