6602 matches found
Design/Logic Flaw
Discourse Mermaid discourse-mermaid-theme-component allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been...
CVE-2022-46180 Arbitrary HTML injection in discourse-mermaid-theme-component
Discourse Mermaid discourse-mermaid-theme-component allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been...
CVE-2022-46180 Arbitrary HTML injection in discourse-mermaid-theme-component
Discourse Mermaid discourse-mermaid-theme-component allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been...
CVE-2023-0049
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
CVE-2023-0049
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
Input validation
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0051 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144...
CVE-2023-0054 Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...
CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32...
CVE-2023-0049
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
CVE-2023-0054
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...
CVE-2023-0049 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
CVE-2023-0049 Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0051 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144...
CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch...
CVE-2023-0049
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...
Hackers Using Stolen Bank Information to Trick Victims into Downloading BitRAT Malware
A new malware campaign has been observed using sensitive information stolen from a bank as a lure in phishing emails to drop a remote access trojan called BitRAT. The unknown adversary is believed to have hijacked the IT infrastructure of a Colombian cooperative bank, using the information to cra...