Cross-site Scripting (XSS) - Stored on Translations

Description Translations are vulnerable to Cross-Site Scripting. Steps to reproduce 1 - Go to Website - Settings 2 - Click on Languages 3 - Fill any field to be translated with an XSS payload : ". 4 - XSS popup will appear. Proof of concept...

[SECURITY] Fedora 36 Update: swig-4.0.2-17.fc36

Simplified Wrapper and Interface Generator SWIG is a software development tool for connecting C, C++ and Objective C programs with a variety of high-level programming languages. SWIG is used with different types of target languages including common scripting languages such as Javascript, Perl, PH...

[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.9.20190703git5bf47e7.fc36

Extract human languages in plain UTF-8 text from computer code and markup...

Fedora: Security Advisory for python-notebook (FEDORA-2022-85aa8e5706)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: python-notebook-6.4.0-4.fc35

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 36 Update: python-notebook-6.4.11-3.fc36

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 35 Update: golang-github-nicksnyder-i18n-2-2.1.2-5.fc35

go-i18n is a Go package and a command that helps you translate Go programs in to multiple languages. - Supports pluralized strings for all 200+ languages in the Unicode Common Locale Data Repository CLDR. - Code and tests are automatically generated from CLDR data. - Supports strings with named...

[SECURITY] Fedora 35 Update: golang-github-client9-plaintext-0-0.8.20190703git5bf47e7.fc35

Extract human languages in plain UTF-8 text from computer code and markup...

[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.8.20190703git5bf47e7.fc36

Extract human languages in plain UTF-8 text from computer code and markup...

CVE-2022-32411

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...

Denial of service

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...

PT-2022-21306

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0 Description An issue in the languages config file allows attackers to getshell. Recommendations For HongCMS version 3.0, consider restricting access to the languages config file until a patch is available...

CVE-2022-32411: Undefined Security Weakness

An issue in the languages config file of HongCMS v3.0 allows attackers to getshell...

Security update for wdiff (moderate)

openSUSE Security Update: Security update for wdiff Announcement ID: openSUSE-SU-2022:10031-1 Rating: moderate References: Cross-References: CVE-2012-3386 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: This update for wdiff...

Malicious code in selinux-policy-languages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f659ff7c045e34e255d6f0d30263f037c75a8c93f13a1f85f08b0bac4fd030d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6004 Malicious code in selinux-policy-languages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f659ff7c045e34e255d6f0d30263f037c75a8c93f13a1f85f08b0bac4fd030d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

vulhub

This repository is an open-source collection of vulnerable web applications and environments for security research and training. It is maintained by phith0n and hosted on GitHub. The repository contains a variety of vulnerable applications, including web servers, databases, and other systems, to...

Subrion CMS CSV injection via Export Language

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

GHSA-4F4H-JGJP-3VFG Subrion CMS CSV injection via Export Language

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

CodeAnalysis - Static Code Analysis

Tencent Cloud Code Analysis TCA for short, code-named CodeDog inside the company early is a comprehensive platform for code analysis and issue tracking. TCA consist of three components, server, web and client. It also supports the integration of other code analysis tools. Code analysis is a...