A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.
Алярма! Тут раздают баблишко тем, кто вкатывается в айтишечку!В России есть три пути: вебкам, закладки и айти. Конечно, любые профессии нужны, любые профессии важны, но я бы хотел помочь тем, кто пытается вкатиться в айти (кстати, необязательно в России). Читать далее
Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1.
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.
OpenCart v4.0.2.2 is vulnerable to Brute Force Attack.
An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application.
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP class, to execute exported functions from libraries.  There is a routine that restricts it to execute specific functions from two dynamic link library files.  By using a CIP class, an attacker can
Меня зовут Данил Щуцкий, я автор проекта CutCode. В этой статье я хотел рассказать вам о MoonShine — панели для администрирования для ваших проектов на Laravel.Над MoonShine я работаю с участниками комьюнити CutCode. Это open‑source проект, основная задача которого — сделать…