Malware in soybean-admin-layout

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11097 Malicious code in soybean-admin-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a6972781b662382399d2ae9303fb5c9213e1d475062dcb8c096bc7b07589c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7025: External Control of Assumed-Immutable Web Parameter

Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Layout component of Google Chrome prior to version 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Layout component of Google Chrome prior to version 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Adobe InDesign Integer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-51893

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FixoLab Postify: Post Layout For Elementor postify-for-elementor allows DOM-Based XSS.This issue affects Postify: Post Layout For Elementor: from n/a through = 1.0.1...

WordPress plugin Postify: Post Layout For Elementor – Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2024-51893: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FixoLab Postify: Post Layout For Elementor postify-for-elementor allows DOM-Based XSS.This issue affects Postify: Post Layout For Elementor: from n/a through = 1.0.1...

PT-2024-35024 · Elementor · Postify: Post Layout For Elementor

Name of the Vulnerable Software and Affected Versions: Postify: Post Layout For Elementor versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the writing of data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

firefox: thunderbird: Use-after-free in layout with accessibility

The Mozilla Foundation's Security Advisory: An attacker could cause a use-after-free when accessibility is enabled, leading to a potentially exploitable crash...

firefox: thunderbird: Use-after-free in layout with accessibility

The Mozilla Foundation's Security Advisory: An attacker could cause a use-after-free when accessibility is enabled, leading to a potentially exploitable crash...

CVE-2024-45147

Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...