Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

Summary The production media handler shipped by next-tinacms-s3 createMediaHandler in packages/next-tinacms-s3/src/handlers.ts accepts an attacker-chosen ?key= query parameter and returns an AWS-signed PutObject URL whose Key is that value, with no check that the key falls under the operator's...

PT-2026-80252

Summary The production media handler shipped by next-tinacms-s3 createMediaHandler in packages/next-tinacms-s3/src/handlers.ts accepts an attacker-chosen ?key= query parameter and returns an AWS-signed PutObject URL whose Key is that value, with no check that the key falls under the operator's...

March 26, 2019—KB4490481 (OS Build 17763.402)

March 26, 2019—KB4490481 OS Build 17763.402 Applies To Windows 10, version 1809, all editions Windows Server 2019, all editions Improvements and fixes This update includes quality improvements. Key changes include: Addresses an issue that occurs on machines that have multiple audio devices...

March 19, 2019—KB4489892 (Preview of Monthly Rollup)

March 19, 2019—KB4489892 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4489878 released March 12, 2019 and also includes these new quality...

Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS16-039)

include include include include pragma commentlib, "psapi.lib" define POCDEBUG 0 if POCDEBUG == 1 define POCDEBUGBREAK getchar elif POCDEBUG == 2 define POCDEBUGBREAK DebugBreak else define POCDEBUGBREAK endif static HBITMAP hBmpHunted = NULL; static HBITMAP hBmpExtend = NULL; static DWORD...