130 matches found
RHEL 9 : firefox (RHSA-2023:4465)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4465 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
RHEL 8 : firefox (RHSA-2023:4463)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4463 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
KLA51618 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in Offscreen Canv...
KLA51620 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be...
Mozilla Thunderbird < 102.14
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.14. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-32 advisory. - Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, an...
CVE-2023-4045
creationtimestamp| type| source ---|---|--- 2023-08-01 18:38:40+00:00| seen| https://t.me/cibsecurity/67512 2023-08-02 18:10:05+00:00| seen| https://t.me/truesecator/4685...
CVE-2023-4045
Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox 116, Firefox ESR 102.14, and Firefox ESR 115.1...
CVE-2023-4045
CVE-2023-4045 involves Offscreen Canvas cross-origin taint tracking in Firefox and ESR branches. Affects Firefox < 116 and ESR
KLA51573 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...
KLA51574 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in Offscreen Canv...
KLA51619 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...
Mozilla Firefox < 116.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 116.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-29 advisory. - Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we...
CVE-4045-2021
creationtimestamp| type| source ---|---|--- 2023-03-07 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7881...
Mattermost Server < 7.4.0 DoS (MMSA-2022-00124)
The version of Mattermost Server running on the remote host is prior to 7.4.0. It is, therefore, affected by a denial of service DoS vulnerability. An authenticated, remote attacker can crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. No...
CVE-2022-4045
creationtimestamp| type| source ---|---|--- 2022-11-23 12:13:38+00:00| seen| https://t.me/cibsecurity/53407...
CVE-2022-4045
CVE-2022-4045 describes a denial-of-service in Mattermost Server: an authenticated user can crash the server by sending multiple requests to an API endpoint that may fetch a large amount of data. The Nessus entry confirms an authenticated, remote attacker can crash the server. Impact is limited t...
CVE-2022-4045 Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server
A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data...
CVE-2022-4045 Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server
A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data...
TP-Link Tapo c200 1.1.15 - Remote Code Execution Exploit
Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE Exploit Author: hacefresko Vendor Homepage: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below Tested on: 1.1.11, 1.1.14 and 1.1.15 CVE : CVE-2021-4045 Write up of the vulnerability:...
TP-Link Tapo c200 1.1.15 Remote Code Execution
Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE Date: 02/11/2022 Exploit Author: hacefresko Vendor Homepage: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below Tested on: 1.1.11, 1.1.14 and 1.1.15 CVE : CVE-2021-4045 Write up of the...