Author: Auto Poster

CVE-2023-2316

Posted by | Aug 22, 2023 | |

Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via “typora://app/<absolute-path>”. This vulnerability...

Read More

CVE-2023-2317

Posted by | Aug 22, 2023 | |

DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading...

Read More

CVE-2023-2318

Posted by | Aug 22, 2023 | |

DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be...

Read More

CVE-2023-3078

Posted by | Aug 22, 2023 | |

CVE-2023-3078 Go to Source An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated...

Read More
Total Security 365