To edit SQL Snippets, Metabase should have required people to be in at least one group with native query editing permissions to a database–but affected versions of Metabase didn't enforce that requirement.

Metabase is an open source business analytics engine. Malicious, privileged software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root, mitigated by the capabilities assigned through the Capsicum sandbox available to the bhyve process. A bug in the state machine implementation can result in a buffer overflowing when copying this string. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1.

This vulnerability exists since XWiki 3.4-milestone-1. This vulnerability affects Firefox ESR xwiki/bin/deletespace/Sandbox/?xredirect=javascript:alert(document.domain). This could be abused to escape the sandbox. The `VideoBridge` allowed any content process to use textures produced by remote decoders. This issue was fixed in and Whilst wrangler dev's inspector server listens on local interfaces by default as of an SSRF vulnerability in miniflare (CVE-2023-7078) allowed access from the local network until and introduced validation for the Origin/Host headers. If wrangler dev -remote was being used, an attacker could access production resources if they were bound to the worker. Additionally, the inspector server did not validate Origin/Host headers, granting an attacker that can trick any user on the local network into opening a malicious website the ability to run code.

This would allow an attacker on the local network to connect to the inspector and run arbitrary code. wrangler dev would previously start an inspector server listening on all network interfaces. The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging.

FastCopy 5.4.0 for mac download