Benzdeus

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network.

A globally mounted `middleware.Static` instance can interpret an encoded request path differently than the router. This occurs because the router matches the encoded path, whereas the static handler utilizes the decoded `URL.Path`. This discrepancy allows an encoded slash to resolve to a file under the static root via the global static middleware.

The WebSocket client in this HTTP client library for Node.js can be forced to exhaust process memory by a malicious or compromised WebSocket server. When the client receives a PING frame, it automatically sends a PONG response but ignores the backpressure signal from the socket write. A server that sends small PING frames without reading the resulting PONGs causes the outbound write queue and heap to grow indefinitely, leading to process termination due to memory exhaustion. This remote, unauthenticated attack requires only a standard WebSocket connection and impacts system availability.

An issue exists in the HTTP client library where the client process crashes during a TLS 1.2 server renegotiation. This occurs when a server presents a CA-trusted certificate with a hostname that does not match the requested host after the connection is established. Node.js performs hostname verification on the renegotiated handshake and destroys the socket with a certificate-altname error. Because the established-socket error handler incorrectly asserts that this error code cannot occur, it results in an uncaught assertion that terminates the Node.js process, impacting both HTTP/1.1 and HTTP/2 paths. A malicious or compromised HTTPS endpoint can trigger this crash via a single server-initiated renegotiation, affecting the global `fetch()` function and all in-flight requests. This only affects TLS 1.2 as TLS 1.3 does not support renegotiation.

OpenSSL stream peer verification incorrectly handles certificate validation by falling back to the Common Name (CN) when no entries in the `subjectAltName` (SAN) match. According to RFC 6125, the CN should be ignored if the certificate contains any service identity. This behavior allows a certificate trusted for one name to be used to impersonate another if the CN matches the requested `peer name` despite a non-matching DNS SAN.

An unauthenticated Cross-Site Request Forgery (CSRF) issue exists in the Issues and Series for Newspapers, Magazines, Publishers, Writers plugin for WordPress. This occurs due to missing or incorrect nonce validation—a security token used to prevent forged requests—within a function. This allows an unauthenticated attacker to perform unauthorized actions by tricking a site administrator into clicking a malicious link.

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.

Missing authorization allows for the exploitation of incorrectly configured access control security levels.

A missing authorization issue in bPlugins PDF Poster allows for the exploitation of incorrectly configured access control security levels.

A Cross-Site Request Forgery (CSRF) flaw in PluginUs.Net BEAR allows an attacker to induce a user to perform actions they did not intend to do.

The Ryan Howard Website LLMs.Txt software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-Site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages. The vulnerability exists due to insufficient sanitization of user-supplied input, potentially enabling an attacker to execute arbitrary code within the context of a user's browser. The affected component is Website LLMs.Txt.

An authorization issue exists in WP Food. The issue involves exploiting incorrectly configured access control security levels. The vulnerability allows unauthorized access.

An authorization issue exists in Cozy Vision SMS Alert Order Notifications. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.

The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the potential execution of malicious scripts within the context of a user's browser. The issue exists in the 'editorial-calendar' component.

The WP Job Portal software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check.

FluentForm is susceptible to a missing authorization issue stemming from incorrectly configured access control security levels. This allows for potential exploitation.

The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting (XSS) issue. Specifically, the vulnerability allows for Stored XSS attacks.

An authorization issue exists in nicdark Hotel Booking, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access to the system.

An incorrect access control configuration exists in Weblizar HR Management Lite, potentially allowing unauthorized access. The issue involves a missing authorization check.

An authorization issue exists in jetmonsters Stratum. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access.