GHSA-FPG8-7664-JC5Q melange: Incomplete package integrity verification allows data section substitution

Previously, Apko verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files that get installed. An attacker who could compromise a mirror, poison a cache, or MITM a package fetch could substitute arbitrary file...

PT-2024-1425 · Jenkins +1 · Jenkins Git Server Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Git server Plugin versions 99.va 0826a b cdfa d and earlier Description: The issue is related to the command parser feature in the Jenkins Git server Plugin that replaces an '@' character followed by a file path in an argument with th...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow a perpetrator to perform content substitution.

The vulnerability of browsers Internet Explorer and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to replace content using a specially crafted URL...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow a perpetrator to perform content substitution.

The vulnerability of browsers Internet Explorer and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to replace content using a specially crafted URL...