Design/Logic Flaw

Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...

Design/Logic Flaw

Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...

Design/Logic Flaw

Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test...

Design/Logic Flaw

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

Design/Logic Flaw

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Design/Logic Flaw

Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Malicious code in design-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 939b31c8e77308691486e2c471ef67e7ba1acc3fc7c3fcccd4355b1901424326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2446 Malicious code in design-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 939b31c8e77308691486e2c471ef67e7ba1acc3fc7c3fcccd4355b1901424326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...

Design/Logic Flaw

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. To address XSA-401, code was moved inside a function in Xen. This code movement missed a variable changing meaning / val...

Design/Logic Flaw

An issue was discovered in yasm version 1.3.0. There is a use-after-free in error in modules/preprocs/nasm/nasm-pp.c...

Design/Logic Flaw

This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion function...

Design/Logic Flaw

This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js...

Design/Logic Flaw

Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

This affects the package properties-reader before 2.2.0...

Four Main Reasons Shoppers Abandon eCommerce Carts

More than just window shopping eCommerce shopping cart abandonment causes brands a sobering USD 18 Billion in annual revenue Forrester Research. While rates differ by device, with mobile and tablet device users most likely to leave before completing their order, nearly 70 percent of shoppers dese...

Design/Logic Flaw

The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...

Malicious code in antd-form-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc32bc73be14dc59b38126b0360d4228f51855a1766affb2b795bddf67179d85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...