3 matches found
pdf.js-CVE-2024-4367
๐จ CVE-2024-4367 - ้็จ PDF.js ๆผๆดๆซๆๅจ โ ๏ธ ๅ ณ้ฎๅฎๅ จๅทฅๅ ท | ๆฃๆต CVE-2024-4367๏ผCVSS 9.8๏ผ- PDF.js ่ฟ็จไปฃ็ ๆง่กๆผๆด ้็จไบไปปไฝ็ฝ็ซ - ้ถ้ ็ฝฎ ๐ ็ฎๅฝ ๐ ๆฆ่ฟฐ โก ๅฟซ้ๅผๅง ๐ ่ฝๆฃๆตไปไน ๐ ๏ธ ๅทฅไฝๅ็ ๐ ่พๅบ็คบไพ ๐ ไฟฎๅคๆๅ ๐ฏ ๆปๅปๅ้ ๐งช ๆต่ฏ่ฏดๆ ๐ ๆๆฏ็ป่ โ ๏ธ ๆณๅพๅ ่ดฃๅฃฐๆ ๐ ๅ่่ตๆ ๐ ๆฆ่ฟฐ CVE-2024-4367 ๆฏ PDF.js๏ผ็ๆฌ 4.2.67๏ผไธญ็ไธไธชๅ ณ้ฎๆผๆด ๏ผๅ ่ฎธ้่ฟๆถๆ PDF ๆไปถๆง่กไปปๆ JavaScript ใๆญคๆซๆๅจ่ฝ่ชๅจๆฃๆต ไปปไฝ็ฝ็ซไธๅญๅจๆผๆด็ PDF.js ๅฎไพใ...
CVE-2026-71278 rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...
UBUNTU-CVE-2022-35978
Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...