debbugs.gnu.org XSS vulnerability

Open Bug Bounty ID: OBB-634820 Description| Value ---|--- Affected Website:| debbugs.gnu.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

debbugs.gnu.org XSS vulnerability

Vulnerable URL: http://debbugs.gnu.org/cgi/pkgreport.cgi?package=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 24.10.2016 Latest check for patch:| 24.10.2016 00:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...