Cross-site Scripting (XSS) - Stored

Description Titra is vulnerable to Stored XSS in the Task field when creating a new task in a project. Steps to reproduce 1.In the Overview tab, click on New project button. 2.Enter a project name and click Save. 3.Move to the Tasks tab in that project and click on New Task button. 4.In the Task...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10005-1 Rating: important References: 1199893 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

CVE-2021-40961

CMS Made Simple =2.2.15 is affected by SQL injection in modules/News/function.adminarticlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '...

CMS Made Simple SQL注入漏洞

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based permission management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple version...

The vulnerability of Google Chrome’s Tab Groups component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Malicious code in misk-web-tab-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ffe98898d88d47a440284c632063af042e511ec3652dddb28163c4f4fec09d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4609 Malicious code in misk-web-tab-admin-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d104f6d0314cf9fe3294e09479bd0a8caf657df817eafe04f59912a85753823c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-tab-web-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82b00b3e72ac86b3969b36273efff67fa09127e6a8982926271d15ea2fb3113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-tab-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f8bdce8a484e3fb50743ce65adf482eff7579242d3c8f9c8f3e9aac45097b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4614 Malicious code in misk-web-tab-web-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82b00b3e72ac86b3969b36273efff67fa09127e6a8982926271d15ea2fb3113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4613 Malicious code in misk-web-tab-template-basic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5ad7e61d179d5150addce9f3bd9838c06999a4f076ed576677b36505796638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-tab-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae44bd45f2d6f157c92c9718c7782e0c142805e9ced92eb727a61c1e72098c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-tab-admin-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d104f6d0314cf9fe3294e09479bd0a8caf657df817eafe04f59912a85753823c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4611 Malicious code in misk-web-tab-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae44bd45f2d6f157c92c9718c7782e0c142805e9ced92eb727a61c1e72098c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4612 Malicious code in misk-web-tab-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91ffe98898d88d47a440284c632063af042e511ec3652dddb28163c4f4fec09d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4610 Malicious code in misk-web-tab-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f8bdce8a484e3fb50743ce65adf482eff7579242d3c8f9c8f3e9aac45097b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Reflected XSS in Results tab

Description Please enter a description of the vulnerability. Proof of Concept 1. Install a local instance of phoronix 2. Run a benchmark 3. When the test is complete, for example the result id is xxxxx 4. Acess...

USN-5460-1 vim vulnerabilities

It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. CVE-2022-0554 It was discovered that Vim was not properly performing bounds checks for column numbers when replacing tabs...

CLSA-2022-1654106859 Fix CVE(s): CVE-2022-0391

SECURITY UPDATE: Injection attack - debian/patches/CVE-2022-0391.patch: sanitize urls in urllib.parse when it containing ASCII newline and tabs in Doc/library/urllib.parse.rst, Lib/test/testurlparse.py, Lib/urllib/parse.py. - CVE-2022-0391...