269 matches found
CVE-2022-34412
creationtimestamp| type| source ---|---|--- 2023-03-16 15:30:58+00:00| seen| https://t.me/cibsecurity/60133...
SUSE CVE-2018-5092
A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations. This vulnerability affects Firefox 58...
SUSE CVE-2018-5103
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...
SUSE CVE-2018-5106
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...
SUSE CVE-2018-5107
The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requires files in a specific format so arbitrary data cannot be read but it is possible that some local file information could be exposed. Thi...
SUSE CVE-2018-5104
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 52.6, Firefox ESR 52.6, and Firefox 58...
SUSE CVE-2018-5111
When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the one loaded. This allows for phishing attacks where a malicious page can spoof the identify of another site. This vulnerability affects...
SUSE CVE-2018-5114
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed. Network requests correctly use the changed HttpOnly cookie. This vulnerability affects Firefox 58...
SUSE CVE-2018-5116
WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions can inject frames from arbitrary origins into the loaded page and then interact with them, bypassing same-origin user expectations with th...
SUSE CVE-2018-5122
A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds write. This vulnerability affects Firefox 58...
SUSE CVE-2018-5124
Unsanitized output in the browser UI leaves HTML tags in place and can result in arbitrary code execution in Firefox before version 58.0.1...
CVE-2023-23379
creationtimestamp| type| source ---|---|--- 2023-02-14 22:41:58+00:00| seen| https://t.me/cibsecurity/58169...
leslunettesdelaurie-58.com Cross Site Scripting vulnerability OBB-3192926
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0650
creationtimestamp| type| source ---|---|--- 2023-02-02 18:44:58+00:00| seen| https://t.me/cibsecurity/57405...
CVE-2022-34398
creationtimestamp| type| source ---|---|--- 2023-02-01 12:13:58+00:00| seen| https://t.me/cibsecurity/57258...
CVE-2022-20609
creationtimestamp| type| source ---|---|--- 2022-12-16 18:30:47+00:00| seen| https://t.me/cibsecurity/54703 2025-04-18 13:58:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12436...
CVE-2022-4525 National Sleep Research Resource sleepdata.org cross site scripting
A vulnerability has been found in National Sleep Research Resource sleepdata.org up to 58.x and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 59.0.0.r...
CVE-2022-45997
creationtimestamp| type| source ---|---|--- 2022-12-12 18:20:58+00:00| seen| https://t.me/cibsecurity/54327 2025-04-22 19:03:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12942...