Reflected cross-site scripting (XSS) in LiveHelperChat lhc-php-resque Extension allows authenticated attackers with low privileges to inject malicious scripts via a crafted queue name parameter, disclosed to the public with proof-of-concept exploit available. Impact is limited to integrity (VI:L), requiring passive user interaction. No active exploitation detected (not in CISA KEV), and EPSS is 0.03%.
A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf.
A security vulnerability in A flaw (CVSS 3.5) that allows a malicious user. Remediation should follow standard vulnerability management procedures.
A flaw was found in Ansible. Sensitive cookies without security flags over non-encrypted channels can lead to Man-in-the-Middle (MitM) and Cross-site scripting (XSS) attacks allowing attackers to read transmitted data.
A security vulnerability in saltbo zpan (CVSS 3.7). Remediation should follow standard vulnerability management procedures.
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile.This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9.1. This is fixed in 6.8.4 and 6.9.2.
Authenticated remote attackers can exploit a path traversal vulnerability in kone-net go-chat to read arbitrary files from the server. The flaw resides in the GetFile endpoint (api/v1/file_controller.go), allowing manipulation of the fileName parameter with directory traversal sequences. Public exploit code is available, but no active exploitation has been observed and the EPSS probability is very low (0.06%).
Authenticated path traversal in gorobbs 1.0.8 and earlier allows low-privileged users to overwrite or delete arbitrary files via a crafted filename in the avatar upload API. An attacker with user-level access can leverage this to disrupt service or tamper with system files. Exploit code is publicly available, though exploitation likelihood is assessed as low (EPSS 0.05%).