The vulnerability of Visual Studio Code’s source editor, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Word’s text editor, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Logic Flaw Vulnerability in InoTouchEditor of Suzhou Huichuan Technology Co.

InoTouch Editor is a professional HMI programming software. A logic flaw vulnerability exists in InoTouchEditor of Suzhou Huichuan Technology Co. An attacker can exploit the vulnerability to obtain plaintext passwords and then read protected private data in the project...

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in access control, allows attackers to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of executing code outside of the buffer memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the issue of code execution outside the buffer. Exploiting these vulnerabilities can allow a malicious actor to...

Froala WYSIWYG HTML Editor Cross-Site Scripting Vulnerability

Froala WYSIWYG HTML Editor is a U.S. Froala company's Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in Froala WYSIWYG HTML Editor versions 3.0.6 through 3.1.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. A...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to privilege management errors. Exploiting these vulnerabilities can allow a malicio...

Raonwiz DEXT5 Editor Arbitrary File Download Vulnerability

Raonwiz DEXT5 Editor is an HTML-based Web editor from the Korean company Raonwiz. A security vulnerability exists in the handler/uploadhandler.jsp file in Raonwiz DEXT5 Editor 3.5.1402961 and earlier versions. An attacker can exploit this vulnerability to download arbitrary files with the help of...

Coronavirus-Themed APT Attack Spreads Malware

An advanced persistent threat APT group is leveraging the coronavirus pandemic to infect victims with a previously unknown malware, in a recently discovered campaign that researchers call “Vicious Panda.” Researchers identified two suspicious Rich Text Format files RTF — a text file format used b...

UBUNTU-CVE-2020-9440

A cross-site scripting XSS vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious acto...

hexo-admin plugin for Node.js cross-site scripting vulnerability

hexo-admin plugin for Node.js is a backend administration plugin for use in Node.js. A cross-site scripting vulnerability exists in the Post editor feature in hexo-admin plugin for Node.js version 2.3.0 and earlier, which stems from the lack of proper validation of client-side data in a web...

Code injection

An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior...

SweetScape Software 010 Editor Input Validation Error Vulnerability

SweetScape Software 010 Editor is a text editor from SweetScape Software Canada. An input validation error vulnerability exists in SweetScape Software 010 Editor version 9.0.1. The vulnerability stems from a networked system or product that does not properly validate input data. An attacker could...

OFCMS backend ueditor uploadVideo file upload vulnerability

OFCMS is a content management system based on Java technology. A backend ueditor uploadVideo file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account file.jsp::$DATA in the...

Cross-site Scripting (XSS)

Overview tui-editor is a GFM Markdown Wysiwyg Editor. Affected versions of this package are vulnerable to Cross-site Scripting XSS. JavaScript inserted into the editor is not sanitized by the library. PoC " src=x onerror="alert1" alert1" alert1" alert1" Details Cross-site scripting or XSS is a co...

Progress Kendo UI Editor Cross-Site Scripting Vulnerability

Progress Kendo UI Editor is a complete UI toolkit for web development. A cross-site scripting vulnerability exists in Progress Kendo UI Editor that allows an attacker to execute JavaScript within the context of the editor itself...

Code injection

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files...

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...