Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/05/23 6:14 p.m.13 views

Silverstripe HtmlEditor embed url sanitisation

"Add from URL" doesn't clearly sanitise URL server side HtmlEditorFieldToolbar has an action HtmlEditorFieldToolbarviewfile, which gets called by the CMS when adding a media "from a URL" i.e. via oembed. This action gets the URL to add in the GET parameter FileURL. However it doesn't do any URL...

7AI score
SaveExploits0References3Affected Software1
Code423n4
Code423n4
added 2021/05/29 12:0 a.m.20 views

auth only works well with external functions

Handle gpersoon Vulnerability details Impact The auth modifier of AccessControl.sol doesn't work as you would expect. It checks if you are authorized for "msg.sig", however msg.sig is the signature of the first function you have called, not of the current function. So if you call function A, whic...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2011/01/20 5:59 a.m.8 views

The unofficial guide to Facebook privacy !

To fully understand the privacy of Facebook and how it's likely to evolve, you need to understand one thing - Facebook executives want everyone to be public. As the service evolves, executives tend to favor our open access to information, meaning information you think is private will slowly becom...

6.6AI score
SaveExploits0
Rows per page
Query Builder