CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

nodejs-electron-31.7.2-1.1 on GA media (moderate)

nodejs-electron-31.7.2-1.1 on GA media Announcement ID: openSUSE-SU-2024:14425-1 Rating: moderate Cross-References: CVE-2024-7025 CVE-2024-7965 CVE-2024-8198 CVE-2024-8362 CVE-2024-8636 CVE-2024-9121 CVE-2024-9123 Affected Products: openSUSE Tumbleweed An update that solves 7 vulnerabilities can...

OPENSUSE-SU-2024:14425-1 nodejs-electron-31.7.2-1.1 on GA media

These are all security issues fixed in the nodejs-electron-31.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

electron31 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-9121. Security: backported fix for CVE-2024-9122. Security: backported fix for CVE-2024-7025. Security: backported fix for CVE-2024-9369. Security: backported fix for CVE-2024-7965...

electron32 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-7966. Security: backported fix for CVE-2024-9370...

nodejs-electron-31.7.1-1.1 on GA media (moderate)

nodejs-electron-31.7.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14410-1 Rating: moderate Cross-References: CVE-2024-9602 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2024:14410-1 nodejs-electron-31.7.1-1.1 on GA media

These are all security issues fixed in the nodejs-electron-31.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : electron{31,32} -- multiple vulnerabilities (815bf172-ab9e-4c4b-9662-d18b0054330d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 815bf172-ab9e-4c4b-9662-d18b0054330d advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

electron{31,32} -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2024-9602. Security: backported fix for CVE-2024-9603...

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

Users searching for game cheats are being tricked into downloading a Lua-based malware that is capable of establishing persistence on infected systems and delivering additional payloads. "These attacks capitalize on the popularity of Lua gaming engine supplements within the student gamer...

Malicious code in electron-release-clerk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62971b65e18446144c3987b2e748be1659667c56f764920e44ca8b98b516a62b The OpenSSF Package Analysis project identified 'electron-release-clerk' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-9072 Malicious code in electron-release-clerk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62971b65e18446144c3987b2e748be1659667c56f764920e44ca8b98b516a62b The OpenSSF Package Analysis project identified 'electron-release-clerk' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

BIT-MATTERMOST-2024-45835

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

GHSA-XGQ9-7GW6-JR5R Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

CVE-2024-45835

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

CVE-2024-45835

Mattermost Desktop App

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...