Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2022-50230)

Adobe InCopy is a text editing software for creative writing from Adobe, USA. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe InCopy Memory Misreference Vulnerability

Adobe InCopy is a text editing software for authoring from Adobe U.S.A. A memory mis-reference vulnerability exists in Adobe InCopy, which stems from a mix-up in the program's instructions for freeing memory. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-45913)

A security vulnerability exists in Adobe InCopy, a text editing software for authoring from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by attackers to cause arbitrary...

CVE-2022-26198

Notable CVE-2022-26198 affects Notable 1.8.4. The issue is that the Title field allows crafted payloads due to lack of filtering of text editing, enabling arbitrary code execution. There is no exploit detail in the provided data. Remediation guidance from PT-2022-17717 recommends disabling the Ti...

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

PT-2022-17717 · Notable · Notable

Name of the Vulnerable Software and Affected Versions: Notable version 1.8.4 Description: The issue allows attackers to execute arbitrary code via a crafted payload injected into the Title text field, due to a lack of filtering for text editing. Recommendations: For Notable version 1.8.4, conside...

Adobe InCopy Resource Management Error Vulnerability

Adobe Incopy is a text editing software for authoring from Adobe U.S. Adobe InCopy has a resource management error vulnerability that can be exploited by attackers to bypass mitigation measures and cause sensitive memory leaks...

[SECURITY] Fedora 34 Update: khotkeys-5.21.3-1.fc34

An advanced editor component which is used in numerous KDE applications requiring a text editing component...

Use-after-free

WebKitGTK+ is vulnerable to use-after-free. It is possible for a remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing...

Mail.ru: api.icq.com / возможность отредактировать текст любого пользователя или группы переслав его.

Нашёл лютую дырку дело в том что при пересылке сообщения пользователя группы текст стоит в параметре конечно же я пробовал его отредактировать и послать пакет но никак не выходило и тут я использовал один старый метод, обычно же идёт GET запрос его мы и меняем, но после идёт POST запрос который...

[SECURITY] Fedora 23 Update: kf5-ktextwidgets-5.24.0-1.fc23

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 24 Update: kf5-ktextwidgets-5.24.0-1.fc24

KDE Frameworks 5 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 22 Update: code-editor-2.8.1-13.fc22

CodeEditor is a slimmed down, customized version of Qt Creator that focuses on bringing its text/code modern editing capabilities to users looking for just a simpl e and beautiful editor...

[SECURITY] [DSA 2930-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2930-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 17, 2014 http://www.debian.org/security/faq -...

Updated chromium-browser-stable packages fix multiple vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation CVE-2014-1740. John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model implementation...

Debian DSA-2930-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. - CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model...

Debian Security Advisory DSA 2930-1 (chromium-browser - security update)

Several vulnerabilties have been discovered in the chromium web browser. CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model...

DSA-2930-1 chromium-browser - security update

Bulletin has no description...

Code injection

The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users with text-editing permissions to read arbitrary node titles via a generated link...