CVE-2024-39031

CVE-2024-39031 : XSS almacenado en Silverpeas Core en Mes agendas Información Descripción: En Mes Agendas, un usuario puede crear nuevos eventos y añadirlos a su calendario. Además, los usuarios pueden invitar a otros del mismo dominio, incluidos administradores, a estos eventos. Un usuario...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS when inviting users to an event. An attacker can execute arbitrary web script or inject HTML by supplying crafted input into the First Name, Middle text, or Last Name fields. Details Cross-site scripting or XSS ...

New PDF Attack Targets Aviation Defense Industry

FireEye reported today it had detected a new critical PDF attack targeting the aviation defense industry. Malware Page exploits a stack-based buffer overflow vulnerability in Adobe Acrobat and Adobe Reader. An attacker would be able to execute code remotely via a crafted argument to the getIcon...