10788 matches found
CVE-2023-4860: Incorrect Implementation of Authentication Algorithm
Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts
Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...
CVE-2024-32945 LaTeX post content manipulation via renderer state leak across contexts
Mattermost Mobile Apps versions =2.16.0 fail to protect against abuse of a globally shared MathJax state which allows an attacker to change the contents of a LateX post, by creating another post with specific macro definitions...
CVE-2024-38527 Cross-site Scripting in ZenUML
ZenUML is JavaScript-based diagramming tool that requires no server, using Markdown-inspired text definitions and a renderer to create and modify sequence diagrams. Markdown-based comments in the ZenUML diagram syntax are susceptible to Cross-site Scripting XSS. The comment feature allows the use...
Malicious code in liquid-renderer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6958 Malicious code in liquid-renderer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3109 Malicious code in test-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2297 Malicious code in en-conduit-electron-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @expue/vue3-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3841 Malicious code in @expue/vue3-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @expue/vue-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3839 Malicious code in @expue/vue-renderer (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-39517
Joplin is a free, open source note taking and to-do application. A Cross site scripting XSS vulnerability in affected versions allows clicking on an untrusted image link to execute arbitrary shell commands. The HTML sanitizer packages/renderer/htmlUtils.ts::sanitizeHtml preserves links. However,...
Exploit for CVE-2024-36527
CVE-2024-36527 PoC and Bulk Scanner !Bannerscreens/screen.j...
CVE-2024-36527
puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server...
Puppeteer Security Vulnerabilities
Puppeteer is a web page renderer by the individual developer Yeongjin Lee. A security vulnerability exists in puppeteer-renderer v.3.2.0 and earlier versions that could allow an attacker to read sensitive information from the server using the URL parameter of the file protocol...
PT-2024-27048 · Unknown · Puppeteer-Renderer
Name of the Vulnerable Software and Affected Versions: puppeteer-renderer versions 3.2.0 and earlier Description: The issue allows attackers to exploit the URL parameter using the file protocol to read sensitive information from the server. This is achieved through a Directory Traversal attack...