164 matches found
CVE-2020-6519
Esto fue publicado originalmente en el Github oficial de la empresa PerimeterX a través de mi cuenta de Github de trabajo. Aunque este es mi trabajo - todos los derechos y asuntos legales pertenecen a la empresa PerimeterX. Chromium 83 Zero Day: Bypass Completo de CSP Multiplataforma CVE-2020-651...
CVE-2020-6519
Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-2020-6519 Technical Article POC as reported to the chromium project...
KLA91252 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability in the Remote Settings Client...
CVE-2026-27822
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting XSS vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an...
EUVD-2026-8590
Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover...
CVE-2026-27822
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting XSS vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an...
CVE-2026-27822
RustFS is a distributed object storage system built in Rust. Prior to version 1.0.0-alpha.83, a Stored Cross-Site Scripting XSS vulnerability in the RustFS Console allows an attacker to execute arbitrary JavaScript in the context of the management console. By bypassing the PDF preview logic, an...
PT-2026-21835
Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.56 through 1.0.0-alpha.82 Description RustFS does not properly validate policy conditions during presigned POST uploads PostObject. This allows bypassing content-length-range, starts-with, and Content-Type...
MiracleLinux 3 : mysql-5.0.95-5.0.1.AXS3 (AXSA:2013-83:02)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-83:02 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...
MiracleLinux 8 : kernel-4.18.0-553.80.1.el8_10 (AXSA:2025-10994:83)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10994:83 advisory. kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors CVE-2025-39757 kernel: ALSA: hda/ca0132: Fix buffer overflow in addtuningcontrol...
Mozilla Firefox < 40.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 40.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk...
Mozilla Firefox < 48.0
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 48.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2016-83 advisory. - bypass FireFox Secure Connection Failed prompt to whitelist any site but doesn't workCVE-2016-5268 CVE-2016-5268 Note...
Mozilla Firefox ESR < 38.2
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 38.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk...
Malicious code in cinta-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac725d6872d30010b4af526b9d60f0f585e3cdd09e6fd41e35b05081dbf6d1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rita-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86b0e5382ad7b5d4ef9ecfa9056a7c75c97e35172743c43bafa6e2296b16406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bitha-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3ea2953344622b71797141df795d669aadf17445e64f93ecce9701d21ecd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in alvino-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805dd12afc922300028b396fe686539eeb8aa4e9093dabf7baba2876fbfce846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152445 Malicious code in alvino-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805dd12afc922300028b396fe686539eeb8aa4e9093dabf7baba2876fbfce846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153884 Malicious code in bitha-83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3ea2953344622b71797141df795d669aadf17445e64f93ecce9701d21ecd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...