EUVD-2018-19784

Malware in sbrugna...

The vulnerability in the export.c file of the export_troff function of the libcaca graphic library, which converts images into ASCII ART, allows a attacker to trigger a memory corruption.

The vulnerability of the export.c file in the exporttroff function of the libcaca graphic library, which converts images into ASCII ART, is related to the escape operation going beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause memory...

Code injection

The select component in bui through 2018-03-13 has XSS because it performs an escape operation on already-escaped text, as demonstrated by workGroupList text...

CVE-2018-8108

CVE-2018-8108 affects the bui library’s select component. The issue is an XSS vulnerability caused by escaping text that has already been escaped, demonstrated by workGroupList text. Affected: bui’s select component (front-end), with roots in the escape operation being applied redundantly. Impact...