CVE-2024-26143

Rails is a web-application framework. There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate, or t on a controller, with a key ending in "html", a :default key which contains untrusted user input, and th...

CVE-2024-26143

CVE-2024-26143 concerns Rails’ Action Controller translation helpers. Affected code paths involve using translate/t with a key ending in “_html” and a :default value containing untrusted input, where the resulting string is rendered in a view, creating an XSS risk. The issue is fixed in Rails ver...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the translation helpers translate, t, etc in Action Controller. An attacker can inject malicious scripts by using a key ending in html with a :default key that contains untrusted user input, if the resulting...

PT-2024-5871 · Unknown +1 · Ruby On Rails +1

Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions prior to 7.1.3.1 Ruby on Rails versions prior to 7.0.8.1 Description: There is a possible XSS vulnerability when using the translation helpers in Action Controller. Applications using translation methods like translate,...

Possible XSS Vulnerability in Action Controller

There is a possible XSS vulnerability when using the translation helpers translate, t, etc in Action Controller. This vulnerability has been assigned the CVE identifier CVE-2024-26143. Versions Affected: = 7.0.0 Not affected: 7.0.0 Fixed Versions: 7.1.3.1, 7.0.8.1 Impact Applications using...

Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

MAL-2024-989 Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

CVE-2023-46837

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

ALPINE-CVE-2023-46837

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

Design/Logic Flaw

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

CVE-2023-34321 arm32: The cache may not be properly cleaned/invalidated

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

CVE-2023-34321

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

MAL-2024-13 Malicious code in @serenity-web/common-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca192112e75d572b4acfa46a40cbca00653059b1452b396d996396c27648ced Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: bpf: Fix reference state management for synchronous callbacks

A flaw was found in the Linux kernel's BPF verifier. The verifier incorrectly handles reference state management for synchronous callbacks that execute multiple times foreach style helpers. This can lead to reference leaks when callbacks acquire references, or double-free conditions when callback...

MAL-2023-8374 Malicious code in by-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020adf63230fbcb34dc4642692ba5c5a7b6df10d3210f7f53717db56ba4e98dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in by-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020adf63230fbcb34dc4642692ba5c5a7b6df10d3210f7f53717db56ba4e98dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 38 : xen (2023-4125279976)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4125279976 advisory. arm32: The cache may not be properly cleaned/invalidated XSA-437, CVE-2023-34321 top-level shadow reference dropped too early for 64-bit PV guests...

CVE-2023-36109

Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecmastringbuilderappendraw component at /jerry-core/ecma/base/ecma-helpers-string.c...

Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...

MAL-2023-7923 Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...