SweetScape Software 010 Editor Input Validation Error Vulnerability

SweetScape Software 010 Editor is a text editor from SweetScape Software Canada. An input validation error vulnerability exists in SweetScape Software 010 Editor version 9.0.1. The vulnerability stems from a networked system or product that does not properly validate input data. An attacker could...

OFCMS backend ueditor uploadVideo file upload vulnerability

OFCMS is a content management system based on Java technology. A backend ueditor uploadVideo file upload vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability stems from the blocking of .jsp and .jspx files that fails to take into account file.jsp::$DATA in the...

Cross-site Scripting (XSS)

Overview tui-editor is a GFM Markdown Wysiwyg Editor. Affected versions of this package are vulnerable to Cross-site Scripting XSS. JavaScript inserted into the editor is not sanitized by the library. PoC " src=x onerror="alert1" alert1" alert1" alert1" Details Cross-site scripting or XSS is a co...

Progress Kendo UI Editor Cross-Site Scripting Vulnerability

Progress Kendo UI Editor is a complete UI toolkit for web development. A cross-site scripting vulnerability exists in Progress Kendo UI Editor that allows an attacker to execute JavaScript within the context of the editor itself...

Code injection

WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files...

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Xiuno BBS Cross-Site Scripting Vulnerability (CNVD-2018-16946)

Xiuno BBS is an open source lightweight forum system. A cross-site scripting vulnerability exists in the editor in Xiuno BBS version 4.0.4. A remote attacker can exploit this vulnerability to steal administrator cookies with the help of a published post...

Kronos Banking Trojan Surfaces After Years of Silence

The Kronos banking trojan is back from the malware dustbin. After years of lying dormant, hackers have reworked the underlying code and are actively targeting victims in Germany, Japan and Poland. The latest variant has incorporated a new command-and-control feature designed to work with the Tor...

The vulnerability of the Equation Editor component in the Microsoft Office software package allows a hacker to execute arbitrary code.

The vulnerability of the Equation Editor component within the Microsoft Office software package arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Wicket jQuery UI WYSIWYG Editor Vulnerability

Wicket jQuery UI is an API that provides all the jQuery UI integration . WYSIWYG editor is one of the editors . A security vulnerability exists in the WYSIWYG editor in Wicket jQuery UI versions 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier. An attacker can exploit the...

Delta Industrial Automation Screen Editor Stack Buffer Overflow Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A stack buffer overflow vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. A remote attacker can exploit this vulnerability to execute...

Delta Industrial Automation Screen Editor Memory Error Causes Vulnerability

Delta Industrial Automation Screen Editor is a set of automation screen editor software from Delta Electronics. A memory misreference vulnerability exists in Delta Industrial Automation Screen Editor version 2.00.23.00 and earlier. The vulnerability can be exploited to execute arbitrary code via ...

PYSEC-2017-108

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

Stored XSS Vulnerability in Full Version of UEditor

UEditor is developed by Baidu web front-end R & D Department of WYSIWYG rich text web editor . A stored XSS vulnerability exists in all versions of UEditor. An attacker can exploit this vulnerability to execute javascript code in a file...

CVE-2017-9289

Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php edit parameter...

Arbitrary File Upload Vulnerability in PowerCreator CMS

PowerCreator CMS is a comprehensive management and application platform based on cloud architecture by Beijing Hambrell Information Technology Co. PowerCreator CMS has an arbitrary file upload vulnerability, the vulnerability stems from the CMS editor does not do any verification of file uploads,...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of JBIG2 parsing functions in programs for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, arises due to the execution of an operation outside the buffer in memory. Exploiting this vulnerability c...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to execute arbitrary code.

The vulnerability of the XFA module for programs that read and edit PDF files, such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary cod...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of the MakeAccessible plugin for PDF viewing and editing applications, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a...

DzSoft PHP Editor File Enumeration Vulnerability

DzSoft PHP Editor is a tool for writing and testing PHP and HTML pages. DzSoft PHP Editor has a security vulnerability.DzSoftpe is equipped with a built-in web server for previewing PHP files when combining the "HEAD" method of HTTP requests with the directory traversal "\ ... /... /..." type of...