Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

Mozilla: The proxy.onRequest API did not catch view-source URLs

The Mozilla Foundation Security Advisory describes this flaw as: When an extension with the proxy permission registered to receive , the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have...

The new Wondershare PDFelement with added features

By Sudais Asif PDFelement is an all-in-one PDF solution allowing users to edit, convert, and optimise documents securely. Here's how it works. This is a post from HackRead.com Read the original post: The new Wondershare PDFelement with added features...

CVE-2020-28858: Cross-Site Request Forgery (CSRF)

OpenAsset Digital Asset Management DAM through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions...

Silver Peak Systems EdgeConnect Software Operating System Command Injection Vulnerability

Silver Peak Systems EdgeConnect Software ECOS is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides features such as path conditioning, application classification, routing, and virtual WAN overlays. Silver Peak Systems EdgeConnect...

CVE-2020-8920

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users'...

CVE-2020-8920

An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users'...

CVE-2020-8920

CVE-2020-8920 describes an information-leak in Gerrit where an over-optimization in the FilteredRepository wrapper bypasses access checks on All-Users repositories, allowing read access to users’ personal information. Affected versions are Gerrit before 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, ...

cn.hutool:hutool-script (>=5.2.5, <=5.5.4), cn.nkpro.elcube:bigdata (>=2.0, <=2.2.8) +56 more potentially affected by CVE-2020-17521 via org.codehaus.groovy:groovy-all (>=3.0.0, <=3.0.6)

org.codehaus.groovy:groovy-all MAVEN version =3.0.0, =5.2.5, =2.0, =2.0, =2.0, =2.2.4, =2.0, =2.0, =2.2.4, =2.2.4, =1.1.0, =1.1.2 - com.aoe:geb-spock-reports 0.3.0-rc1 - com.ascert.open.json2yaml:com.ascert.open.json2yaml.gradle.plugin 1.1.1 - com.ascert.open:json2yaml 1.1.1 -...

cn.hutool:hutool-script (>=5.2.5, <=5.5.4), cn.nkpro.elcube:bigdata (>=2.0, <=2.2.8) +56 more potentially affected by CVE-2020-17521 via org.codehaus.groovy:groovy-all (>=3.0.0, <=3.0.6)

org.codehaus.groovy:groovy-all MAVEN version =3.0.0, =5.2.5, =2.0, =2.0, =2.0, =2.2.4, =2.0, =2.0, =2.2.4, =2.2.4, =1.1.0, =1.1.2 - com.aoe:geb-spock-reports 0.3.0-rc1 - com.ascert.open.json2yaml:com.ascert.open.json2yaml.gradle.plugin 1.1.1 - com.ascert.open:json2yaml 1.1.1 -...

aspectj.aspectjgradleplugin:aspectj.aspectjgradleplugin.gradle.plugin (>=0.0.4, <=0.0.8), ch.artecat.jexler:jexler-core (4.0.0) +779 more potentially affected by CVE-2020-17521 via org.codehaus.groovy:groovy-all (>=2.5.0, <=2.5.13)

org.codehaus.groovy:groovy-all MAVEN version =2.5.0, =0.0.4, =1.0, =8.1.0.371, =8.1.0.304, =8.1.0.371, =8.1.0.516, =8.1.0.304, =8.1.0.286, =8.1.0.286, =8.1.0.371, =8.1.0.371, =8.1.0.286, =8.1.0.286, =8.1.0.371, =8.1.0.585.9 and more Source cves: CVE-2020-17521 Source advisory: GHSA-RCJJ-H6GH-JF3R...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), app.ariadust.dendrobium:app.ariadust.dendrobium.gradle.plugin (>=1.0.0, <=1.0.4) +4408 more potentially affected by CVE-2020-17521 via org.codehaus.groovy:groovy-all (>=2.0.0, <=2.4.20)

org.codehaus.groovy:groovy-all MAVEN version =2.0.0, =0.0.5, =1.0.0, =1.0.0, =0.0.2, =0.2.dev, =0.2.dev, =2.1.10, =2.2.11, =2.2.11, =2.0.0, =2.0.0, =3.5.4-rc.0, =3.5.9, =3.5.24 and more Source cves: CVE-2020-17521 Source advisory: GHSA-RCJJ-H6GH-JF3R...

aspectj.aspectjgradleplugin:aspectj.aspectjgradleplugin.gradle.plugin (>=0.0.4, <=0.0.8), ch.artecat.jexler:jexler-core (4.0.0) +779 more potentially affected by CVE-2020-17521 via org.codehaus.groovy:groovy-all (>=2.5.0, <=2.5.13)

org.codehaus.groovy:groovy-all MAVEN version =2.5.0, =0.0.4, =1.0, =8.1.0.371, =8.1.0.304, =8.1.0.371, =8.1.0.516, =8.1.0.304, =8.1.0.286, =8.1.0.286, =8.1.0.371, =8.1.0.371, =8.1.0.286, =8.1.0.286, =8.1.0.371, =8.1.0.585.9 and more Source cves: CVE-2020-17521 Source advisory:...

Gitlab Denial of Service Vulnerability (CNVD-2020-70850)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A denial of service vulnerability exists in all versions ...

Siemens LOGO! 8 BM Improper Encryption Algorithm Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM, which can be exploited by an attacker to gain unauthorized full access to all services...