The Qt WebChannel module provides a library for seamless integration of C++ and QML applications with HTML/JavaScript clients. Any QObject can be published to remote clients, where its public API beco ...
Continue ReadingJune 05, 2024
typo3/cms is vulnerable to SQL injection. The vulnerability is due to a flaw in the database escaping API when configured for MySQL passthrough mode, which affects all queries using DatabaseConnection ...
Continue ReadingJune 05, 2024
ethyca_fides is vulnerable to Information Disclosure. The vulnerability is due to improper masking of nested sensitive fields such as private_key in the BigQuery connection configuration, which allows ...
Continue ReadingJune 05, 2024
Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious se ...
Continue ReadingJune 05, 2024
The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can e ...
Continue ReadingJune 05, 2024
The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can e ...
Continue ReadingJune 05, 2024
Security Advisory Description In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'U ...
Continue ReadingJune 05, 2024
HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called...Read More ...
Continue ReadingJune 05, 2024
Back to Main