10 matches found
CVE-2024-22891
Nteract PoC Proof-of-Concept для уязвимости CVE-2024-22891. nteract 0.28.0 позволяет использовать Electron webview через ссылку Markdown, что приводит к удалённому выполнению кода. В этом репозитории представлены пример уязвимого приложения и эксплойт proof-of-concept POC для него. В качестве PoC...
CVE-2024-25291
DeskFiler RCE Une preuve de concept pour la vulnérabilité CVE-2024-25291. deskfiler - 1.2.3 permet d'utiliser Electron webview dans l'application, ce qui entraîne l'exécution de code à distance. Dans ce dépôt, il y a un exemple d'application vulnérable et une preuve de concept POC d'exploitation...
CVE-2024-25292
RenderTune RCE إثبات المفهوم لثغرة CVE-2024-25292. تتيح ثغرة البرمجة النصية عبر المواقع XSS في RenderTune v1.1.4 للمهاجمين تنفيذ نصوص ويب أو HTML عشوائية عبر حمولة مصمّمة تُحقن في معامل عنوان الرفع Upload Title. يحتوي هذا المستودع على تطبيق مثال معرّض للثغرة واستغلال إثبات المفهوم POC لها. كإثبات...
EUVD-2020-30263
Malware in sbrugna...
CVE-2020-9443
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...
Exploit for Code Injection in Deskfiler
DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...
Exploit for Open Redirect in Nteract
Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...
CVE-2020-9443
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...
Design/Logic Flaw
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...
CVE-2020-9443
CVE-2020-9443 affects Zulip Desktop prior to 4.0.3. The issue arises from loading untrusted content in an Electron webview with web security disabled, enabling cross-site scripting (XSS) in multiple ways. The vulnerability notably impacts Zulip Desktop 2.3.82. The public documentation notes this ...