CVE-2023-2800

CVE-2023-2800 affects Hugging Face Transformers (prior to 4.30.0). Insecure temporary file creation via tempfile.mktemp() could enable local denial of service. The IBM/IBM Cloud Pak bulletin and GH advisories confirm the workaround: upgrade Transformers to 4.30.0 or newer.

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

GHSA-F2C9-5JQW-3XH3 Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

Cross-Site Scripting in Qiita::Markdown

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

Cross-site Scripting (XSS)

Overview qiita-markdown is a Qiita-specified markdown processor. Affected versions of this package are vulnerable to Cross-site Scripting XSS. Increments Qiita::Markdown allows XSS in transformers. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” ...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

Cross site scripting

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

CVE-2021-28796 affects Qiita::Markdown (Ruby) prior to 0.33.0, allowing XSS via transformers. The issue is documented across multiple connected sources (e.g., Red Hat CVEs, OSV/GHSA advisories) as a failure to sanitize or neutralize user-controlled input in the transformer path, leading to cross-...

Schweitzer Engineering Laboratories AC Protection Module Detection

Binary data 755363.prm...

transformers.hasbro.com XSS vulnerability

Vulnerable URL: https://transformers.hasbro.com/pl-pl/video/Transformers%20Robots%20in%20Disguise:%20POZNAJ%20AUTOBOTY?playlistid=%3C/script%3E%22%3E%3Csvg/onload=alert/XSSPOSED/%3E=4014810013001 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability...

Angry Birds Transformers - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Angry Birds Transformers published at the 'play' market has multiple vulnerabilities...

Transformers: RobotsInDisguise - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Transformers: RobotsInDisguise published at the 'play' market has multiple vulnerabilities...

Call of Duty, Spider-Man and other 7 Largest Video Game Sites Hacked

Call of Duty, Spider-Man and other 7 Largest Video Game Sites Hacked Today Turkish Hackers from group "GrayHatz" hack and Deface Call of Duty, Spider-Man and other 7 Largest Video Game Sites. Hacked Sites Include: - Call of Duty® Official Video Game Site : Link and Mirror - X-Men Origins:...

Unfixed XSS vulnerability at www.transformers-universe.com

Security researcher PaPPy, has submitted on 16/11/2008 a cross-site-scripting XSS vulnerability affecting www.transformers-universe.com, which at the time of submission ranked 930918 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2009. I...