10862 matches found
advisories
Sobre mim Twitter: @justinsteven Blog: https://www.justinsteven.com/ Avisos Listados em ordem cronológica inversa. Clique em qualquer título para ler o aviso completo. XSS de DOM via postMessage no widget do Gartner Peer Insights Data de divulgação: 2023-02-03 O widget do Gartner Peer Insights...
CVE-2026-79179
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65...
CVE-2026-79185
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowe...
CVE-2026-78975
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65...
CVE-2026-79271
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowe...
CVE-2026-79271
A flaw was found in Google Chrome. An information leak vulnerability exists in the Document Object Model DOM. A remote attacker could exploit this by leveraging social engineering tactics to trick a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitiv...
CVE-2026-79185
A flaw was found in the Document Object Model DOM in Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to an information leak, allowing the attacker to bypass the web origin policy and potentially access...
CVE-2026-54606
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...
SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
Summary A DOM-based Cross-Site Scripting XSS vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed HTML followed by an external element bypasses the plugin’s sanitization logic. The plugin recreates and appends the attacker-controlled script element to the live DOM, causing...
NPM: SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
NPM: SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed vulnerability discovered by ? in WordPress Npm suneditor versions = 3.1.3...
CVE-2026-54606
SunEditor (lightweight WYSIWYG JavaScript editor) is vulnerable to DOM-based cross-site scripting in its Embed plugin (src/plugins/modal/embed.js). Prior to version 3.1.4 , the plugin parses attacker-controlled raw embed HTML using DOMParser; when an external [removed] element follows a valid , i...
CVE-2026-54606 SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...
CVE-2026-54606 SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...
EUVD-2026-66595
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...
Linux Distros Unpatched Vulnerability : CVE-2026-79185
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security...
DEBIAN-CVE-2026-79271
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79271
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-79185
Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...