In affected versions the `_link function` uses the python-validators URL validation regex. Torbot is an open source tor network intelligence tool. LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server. Incorrect security UI in BFCache in Google Chrome prior to 1.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.Īn incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins.

All versions prior to 7.14.3.69 are affected. An attacker must first successfully obtain valid agent credentials and agent hostname. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so.Īn improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. This issue affects Docker Desktop: before 4.23.0. The URL is not validated or sanitised before it is fetched, thus allowing a malicious web page to arbitrarily fetch URL’s via the victim's browser.ĭocker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL.

Within the listener is code that requests a URL derived from the received message via fetch(). The React Developer Tools extension registers a message listener with window.addEventListener('message', ) in a content script that is accessible to any webpage that is active in the browser.

Download the new for ios WinSCP 6.1.1