GHSA-8HF9-3Q64-Q2QF Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option

Summary When dalfox is run in REST API server mode, the output, output-all, and debug fields in model.Options are JSON-tagged and deserialized directly from the attacker's request body, then propagated unchanged through dalfox.Initialize into the scan engine's logging path. The logger opens the...

EUVD-1999-0215

Malware in sbrugna...

Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append Function Information Disclosure Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird ArrayBufferBuilder::append function, which can be exploited by a remote attacker to access arbitrary memory locations...