WPE WebKit WebKitGTK Buffer Overflow DoS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

HTML Injection in Folder Name

Description The folder name does not sanitize folder name and due to missing output encoding, HTML user-input is rendered in the webpage during folder deletion. Proof of Concept 1. Login to Teampass as any user. 2. Go to Folders tab. 3. Create a new folder with HTML tag in the Label. Example: HTM...

WebKitGTK Information Disclosure

The vulnerability of the WebPageRendering module in WebKitGTK relates to the disclosure of information in erroneous data areas. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

WebKitGTK WebPage Rendering DoS

The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

WebKitGTK WebPage Rendering Data Compromise

The vulnerability of the WebPage rendering module in WebKitGTK is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

WebPage rendering module in Data Compromise

The vulnerability of the WebPageRendering module in WebKitGTK relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

WebKitGTK+ Service Data Unauthorized Access

The vulnerability of the WebPage rendering module in WebKitGTK+ relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created web page...

Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input. Attackers can exploit these...