CVE-2021-32674 Remote Code Execution via traversal in TAL expressions

Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available for using in TAL...

The vulnerability of Google Chrome’s online payment mechanism, which allows a violator to compromise data integrity

The vulnerability of Google Chrome’s online payment mechanism is related to the lack of a standard permission mechanism. Exploiting this vulnerability allows a malicious actor to affect data integrity through a specially created HTML page...