Bananabr

يمكن للمسؤول المصادق عليه الذي لا يمتلك امتيازات المستخدم المتميز حقن حمولة JavaScript عند إنشاء فترة صيانة. يتم تنفيذ هذه الحمولة عندما يفتح أي مستخدم تلميح الأداة الخاص بتلك الفترة المحددة من الصيانة داخل أداة «Host navigator»، مما قد يسمح للمهاجم بتنفيذ إجراءات غير مصرح بها بناءً على أذونات المستخدم الذي يقوم بتشغيل تلميح الأداة.

This issue allows local attackers to escalate privileges on affected installations of NoMachine. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system. The specific flaw exists within nxnode.exe, where the process loads a library from an unsecured location, allowing an attacker to leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue allows a local attacker to execute arbitrary code via a generated file name that is not properly escaped and injected into a system call when certain types of compression are used.

The issue is related to a buffer overflow vulnerability in the EctEnhancedCT method component of the DCMTK library, which is used for working with the DICOM format. This vulnerability is associated with the copying of a buffer without checking the input data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information. The vulnerability allows an attacker to execute arbitrary code.

Vditor is a browser-side Markdown editor. The issue at hand is a copy-paste cross-site scripting (XSS) problem. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor.

The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor.

The issue is related to copy-paste cross-site scripting (XSS) in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor.

The issue concerns a code injection vulnerability via pasted input in Editor.js, a block-style editor. The `processHTML` method is vulnerable as it passes pasted input into the wrapper's `innerHTML`. This allows for potential code injection attacks.

The issue is related to insufficient input validation in the NVIDIA GPU Display Driver, allowing an unprivileged user to access or modify system files, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts.

Metabase is an open source business intelligence and analytics application. In affected versions, Metabase ships with an internal development endpoint `/ internal` that can allow for cross site scripting (XSS) attacks, potentially leading to phishing attempts with malicious links that could lead to account takeover.

Name of the Vulnerable Software and Affected Versions: OpenProject versions 12.0.0 through 12.0.3 Description: OpenProject is a web-based project management software. The software is vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget insufficiently sanitizes user input in the `reassign to id` parameter. Recommendations: For OpenProject versions 12.0.0 through 12.0.3, upgrade to at least version 12.0.4 to resolve the issue. If you are unable to upgrade in a timely fashion, consider applying a patch to fix the vulnerability. As a temporary workaround, consider restricting access to the budgets module for users with the "Edit budgets" permission until a patch is applied. Avoid using the `reassign to id` parameter in the affected API endpoint until the issue is resolved.

The issue allows for cross-site scripting (XSS) attacks via clipboard content. If a user can be tricked into copying malicious content and pasting it into the HTML editor, a part of the clipboard content is directly written to `innerHTML`, causing XSS. This enables JavaScript injection.

A self Cross-Site Scripting issue exists in the @github/paste-markdown library. If the clipboard data contains the string `<table>`, a div is dynamically created, and the clipboard content is copied into its innerHTML property without any sanitization, resulting in improper execution of JavaScript in the browser of the victim. Users directed to copy text from a malicious website and paste it into pages that utilize this library are affected.

The issue affects Discourse, an open source discussion platform, where rendering of d-popover tooltips can be susceptible to XSS attacks in versions prior to 2.7.8. This vulnerability only affects sites that have modified or disabled Discourse's default Content Security Policy.

The issue is related to an inappropriate implementation in the Network component of Google Chrome, allowing a remote attacker to potentially access local UDP ports via a crafted HTML page. This could lead to unauthorized access to protected information. The vulnerability is also related to a security check flaw for standard elements in the browser's Network panel, which can be exploited by a remote attacker using a specially crafted web page.