CVE-2019-11933

CVE-2019-11933 Android版WhatsAppのバージョン2.19.291以前に影響するWhatsAppのメディアピッカーにおけるヒープ破損 背景 GIFファイルは、特定のバイトで区切られたセグメントに分割されます。 Image 0x2C 画像セクションはGIFファイル内の単一フレームを記述し、高さ、幅、および圧縮された画像自体などの情報を含みます。GIFは複数のフレームを持つことができ、したがって複数の画像セクションを持ちます。 Extension 0x21 拡張セクションには、画像を変更するために使用されるデータが含まれます。 Terminate 0x3B...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension

CMSmadesimple 저장형 XSS v2.2.18 작성자: Sergio 설명: CMSmadesimple v.2.2.18의 XSS크로스 사이트 스크립팅 취약점으로 인해 로컬 공격자가 파일 선택기 메뉴File Picker Menu의 최상위 디렉터리Top Directory에 제작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: 스크립팅: '파일 선택기 메뉴File Picker Menu'의 최상위 디렉터리 항목에 대한 정화sanitization 과정에서 발생하는 취약점으로 인해 사용자가 웹 페이지에 접근할 때 실행...

CVE-2024-25466

CVE-2024-25466 CVE-2024-25466에 대한 설명 제안된 설명 React Native Document Picker의 디렉터리 트래버설 취약점으로, v.9.1.1 이전 버전에 존재하며 v.9.1.1에서 수정되었습니다. 이 취약점으로 인해 로컬 공격자가 조작된 스크립트를 Android 라이브러리 구성 요소에 전달하여 임의 코드를 실행할 수 있습니다. 취약점 유형 디렉터리 트래버설 제품 공급업체 https://github.com/rnmods/react-native-document-picker/ 영향받는 제품 코드 베...

CVE-2026-86418

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

CVE-2026-86418

MISP (≤2.5.45) exposes organisation metadata (ID, UUID, name) through the dashboard organisation picker endpoint without applying the same visibility restrictions enforced by the normal organisation index. When Security.hide_organisation_index_from_users was enabled, normal enumeration was restri...

CVE-2026-86418 MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

EUVD-2026-72362

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

CVE-2026-86418 MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

PT-2026-86768

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

PT-2026-83128

file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...

Astra Linux – Vulnerability in Batik

Apache Batik 1.13 is vulnerable to server-side request forgery, which is caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests...

Astra Linux – Vulnerability in Thunderbird, Firefox

The date picker may partially obscure security prompts. A malicious site could use this feature to trick users into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...

Astra Linux – Vulnerability in Firefox and Thunderbird

When creating a callback via IPC to display the Color Picker window, multiple identical callbacks might be created at once. Eventually, all of them would be destroyed as soon as one of the callbacks is completed. This could lead to a use-after-free condition, resulting in a potentially exploitabl...

Astra Linux – Vulnerability in Firefox and Thunderbird

When creating a callback via IPC to display the File Picker window, multiple identical callbacks might be created at once. Eventually, all of them would be destroyed as soon as one of the callbacks is completed. This could lead to a use-after-free condition, resulting in a potentially exploitable...

Astra Linux – Vulnerability in Firefox

A ambiguous file picker design could have confused users who intended to select and upload a single file, into uploading an entire directory. This issue was addressed by adding a new prompt. This vulnerability affects Firefox versions earlier than 85...

Astra Linux – Vulnerability in jqueryui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...

Astra Linux – Vulnerability in Chromium

The inappropriate implementation of the File Picker in Google Chrome prior to version 139.0.7258.127 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-75917

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...