An issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.
An issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.
An issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag name.
An issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one administrator puts a javascript: URL in the URL field, and another administrator clicks on it.
An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."
An issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be bypassed via vectors involving an "Accept: application/json" header.
In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.
gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.
Когда-то давным-давно резанув по глазам, остались в памяти две книжки в размалеванных обложках. Первая - нечто из разряда экстрасенсорики, написанное в стиле "в первую ночь занятий делайте то-то и то-то, во вторую - еще и вот это..." после чего, на третий раз, обещан был…
Из новостей: Unity 2021 LTS, Cascadeur 2022.1 EA, HIP-RT от AMD, Rust GameDev 32.Из интересностей: о работе над освещением и окружением для Cyberpunk 2077, про создание игр на своём 3D движке в одиночку, значение рандомизации в игровом дизайне, сборка мусора в Unreal Engine, плащ-невидимка, сделанный в Blender. Читать далее