Segfaultmaster

An issue was discovered that allows an attacker to cause Denial of Service or possibly have other unspecified impact by sending a crafted file to certain binaries, such as mp42hls, which triggers an out of bounds write in the AP4 CttsTableEntry constructor located in Core/Ap4Array.h.

A heap-based buffer over-read issue exists in the `AP4 BitStream::ReadBytes()` function in `Codecs/Ap4BitStream.cpp`. This can be triggered by sending a crafted file to the `aac2mp4` binary, potentially allowing an attacker to cause a Denial of Service (Segmentation fault) or have other unspecified impacts.

A NULL pointer dereference issue occurs in the `AP4 Track::GetSampleIndexForTimeStampMs()` function, located in `Core/Ap4Track.cpp`, which can be triggered by sending a crafted file to the `mp4audioclip` binary. This allows an attacker to cause a Denial of Service, resulting in a Segmentation fault, or possibly have other unspecified impacts.

A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable `Title` field to "/admin/taxonomy/vocabularies".

A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable Blog field to "/admin/nodes/nodes/add/blog".

A stored-self XSS issue allows an attacker to execute HTML or JavaScript code in a vulnerable `Title` field to the "/admin/menus/menus/edit/3" API endpoint.

A stored-self XSS issue allows an attacker to execute HTML or JavaScript code in a vulnerable Title field to the "/admin/blocks/blocks/edit/8" API endpoint.

A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to the "/mods/ core/users/admins/my edit.php" API endpoint.

A stored-self XSS issue allows an attacker to execute HTML or JavaScript code in a vulnerable Title field to the "/admin/file-manager/attachments/edit/4" API endpoint. This enables the attacker to inject malicious code, potentially leading to unauthorized actions or data exposure.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting (XSS) issue exists due to the lack of escaping of unintended characters in the Website Hostname for Data Collectors. This occurs in the pollers.php file. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting (XSS) issue exists due to the lack of escaping of unintended characters in the Name field for a Color. This allows for potential injection of malicious scripts. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting (XSS) issue exists due to the lack of escaping of unintended characters in the Website Hostname field for Devices, which can be accessed via tree.php in host.php. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.0 Description: A cross-site scripting (XSS) issue exists due to the lack of escaping of unintended characters in the Graph Vertical Label. Recommendations: For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.