OSV-2022-733 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

CVE-2022-32148

Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the...

[SECURITY] Fedora 35 Update: deepin-api-5.4.11-4.fc35

Go-lang bingding for dde-daemon...

lang-boden.de Cross Site Scripting vulnerability OBB-2747830

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 36 Update: golang-github-google-martian-3.1.0-9.fc36

Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: - Verify that all or some subset of requests are secure - Mock external services at the network layer - Inject headers, modify cookies or perform other mutations of HTTP...

The vulnerability of the /admin/general/change-lang component of the TrueConf Server software, which allows a hacker to redirect a user to any arbitrary URL address.

The vulnerability of the /admin/general/change-lang component of the TrueConf Server involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...

CVE-2017-20119 TrueConf Server change-lang redirect

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirecturl leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclos...

PT-2022-3296 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server version 4.3.7 Description: A problematic vulnerability has been found in TrueConf Server, affecting an unknown part of the file /admin/general/change-lang. The manipulation of the redirect url argument leads to an open redirec...

Malicious code in elm-lang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e3e1a02b1f6ea6029804fcdfa5dabcc95222805d9c537c1ee5d75dd7d4b791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2705 Malicious code in elm-lang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e3e1a02b1f6ea6029804fcdfa5dabcc95222805d9c537c1ee5d75dd7d4b791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Joomla! Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

GHSA-GW37-VMVW-F833 Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter...

CVE-2022-29307

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copylangcontent in application/models/langmodel.php...

Prototype Pollution

jsgui-lang-essentials is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the llset function in the jsgui-lang-essentials.js and modify attributes such as proto, constructor, and prototype...

jsgui-node-file-metadata (0.3.8), jsgui-node-fs2-core (>=0.1.0, <=0.1.5) +7 more potentially affected by CVE-2022-25301 via jsgui-lang-essentials (>=0.3.8, <=0.4.3)

jsgui-lang-essentials NPM version =0.3.8, =0.1.0, =0.1.0, =0.1.0, =0.3.8, =0.3.8, =0.3.35 Source cves: CVE-2022-25301 Source advisory: OSV:GHSA-P3PG-64PV-V7JG...

Prototype Pollution in jsgui-lang-essentials

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype...

GHSA-P3PG-64PV-V7JG Prototype Pollution in jsgui-lang-essentials

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype...

Code injection

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype...

CVE-2022-25301 Prototype Pollution

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype...

CVE-2022-25301

Prototype Pollution in jsgui-lang-essentials affects all versions, enabling an attacker to alter Object attributes (e.g., proto , constructor, prototype) via methods like ll_set. This can pollution prototypes and lead to DoS or remote code execution; remediation shows no fixed version for the pac...