Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...

GHSA-JGVR-6X5W-HX5W Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service

Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...

EUVD-2018-13849

Malware in sbrugna...

EUVD-2008-2069

Malware in sbrugna...

EUVD-2008-2070

Malware in sbrugna...

EUVD-2024-45898

Malicious code in bioql PyPI...

CVE-2018-25097

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

CVE-2024-52411

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2...

CVE-2024-52411

CVE-2024-52411 describes a deserialization of untrusted data vulnerability in Flowcraft UX Design Studio Advanced Personalization, enabling PHP object injection. Affected: Flowcraft Advanced Personalization component, versions up to 1.1.2 (n/a through 1.1.2). CVSS 3.1 base 9.8 (Network attack vec...

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

PT-2024-35251 · Unknown · Flowcraft Ux Design Studio

Name of the Vulnerable Software and Affected Versions: Flowcraft UX Design Studio Advanced Personalization versions from n/a through 1.1.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This problem affects the Advanced Personalization...

CVE-2018-25097

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

CVE-2018-25097

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

CVE-2018-25097 Acumos Design Studio cross site scripting

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

CVE-2018-25097 Acumos Design Studio cross site scripting

A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of...

CVE-2018-25097

CVE-2018-25097 affects Acumos Design Studio up to version 2.0.7. The issue is a cross-site scripting vulnerability arising from an unknown function, which can be exploited remotely. The advisory consistently indicates that upgrading to version 2.0.8 mitigates the issue, with the patch identified ...

PT-2024-10616 · Unknown · Acumos Design Studio

Name of the Vulnerable Software and Affected Versions: Acumos Design Studio versions up to 2.0.7 Description: A vulnerability was found in Acumos Design Studio, which can be exploited to lead to cross site scripting. The manipulation can be launched remotely. Recommendations: For Acumos Design...

Acumos Design Studio Cross-Site Scripting Vulnerability

Acumos Design Studio is a platform and open source framework from Acumos Open Source. It allows for easy building, sharing and deployment of AI applications. A cross-site scripting vulnerability exists in Acumos Design Studio version 2.0.7, which stems from the presence of an unknown function tha...