Read Time:5 Second
Nicky Mouha discovered a buffer overflow in sha3, a Python library for
the SHA-3 hashing functions.
Category Archives: Advisories
CVE-2021-42777 (reports)
Read Time:13 Second
Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any machine that renders a report, including the application server or a user’s local machine, as demonstrated by System.Diagnostics.Process.Start.
DSA-5265 tomcat9 – security update
Read Time:4 Second
Several security vulnerabilities have been discovered in the Tomcat
servlet and JSP engine.
DSA-5264 batik – security update
Read Time:7 Second
It was discovered that Apache Batik, a SVG library for Java, allowed
attackers to run arbitrary Java code by processing a malicious SVG file.
DSA-5263 chromium – security update
Read Time:5 Second
A security issue was discovered in Chromium, which could result in the
execution of arbitrary code.
CVE-2021-36898
Read Time:5 Second
Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2021-36864
Read Time:6 Second
Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2021-36863 (quiz_and_survey_master)
Read Time:6 Second
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVE-2021-38217 (semcms)
CVE-2021-36858 (testimonials)
Read Time:5 Second
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.