Lucene search
+L

2365 matches found

Github Security Blog
Github Security Blog
added 2024/09/16 3:32 p.m.31 views

Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

6.5CVSS6.8AI score0.00205EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/16 3:32 p.m.9 views

GHSA-XGQ9-7GW6-JR5R Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS4.9AI score0.00205EPSS
SaveExploits0References3
NVD
NVD
added 2024/09/16 3:15 p.m.37 views

CVE-2024-45835

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

6.5CVSS0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/16 2:27 p.m.48 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/16 2:27 p.m.62 views

CVE-2024-45835

Mattermost Desktop App

6.5CVSS4AI score0.00205EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/16 2:27 p.m.16 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/09/16 2:27 p.m.11 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS6.9AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/16 12:00 a.m.18 views

PT-2024-31800 · Mattermost +1 · Mattermost Desktop App +1

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App versions =5.8.0 Description: The Mattermost Desktop App fails to sufficiently configure Electron Fuses, allowing an attacker to gather Chromium cookies or abuse other misconfigurations via remote or local access. This...

6.5CVSS6.4AI score0.00205EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/09/16 12:00 a.m.7 views

Mattermost Desktop App 安全漏洞

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.8.0 and prior versions, which stems from a failure to adequately configure Electron Fuses.An attacker could use this vulnerability to collect Chromium...

6.5CVSS6.5AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/10 9:15 a.m.29 views

CVE-2024-8258

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

7.8CVSS0.00393EPSS
SaveExploits1References4
OSV
OSV
added 2024/09/10 9:15 a.m.12 views

CVE-2024-8258

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

7.8CVSS6.2AI score0.04333EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/09/10 8:36 a.m.43 views

CVE-2024-8258 Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

2CVSS8.2AI score0.00393EPSS
SaveExploits1References4
CVE
CVE
added 2024/09/10 8:36 a.m.153 views

CVE-2024-8258

CVE-2024-8258 affects Logitech Options Plus on macOS (v1.60.496306). The issue is due to improper control of generation of code in Electron Fuses, enabling arbitrary code execution via insecure Electron Fuses configuration (local attack vector, no user interaction; CVSS 3.1 base 7.8, high). Some ...

7.8CVSS7.9AI score0.00393EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/09/10 8:36 a.m.40 views

CVE-2024-8258 Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

2CVSS0.00393EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/09/10 12:00 a.m.12 views

Logitech Options 安全漏洞

Logitech Options is a powerful and easy-to-use application from Logitech Switzerland that enhances your Logitech mouse, keyboard, and touchpad. A security vulnerability exists in Logitech Options version 1.60.496306, which originates from improperly controlled code generation in Electron fuses an...

9.8CVSS8.4AI score0.04333EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2024/09/10 12:00 a.m.9 views

PT-2024-38895 · Logitech · Logitech Options Plus

Name of the Vulnerable Software and Affected Versions: Logitech Options Plus version 1.60.496306 Description: The issue is related to improper control of generation of code, also known as 'code injection', in Electron Fuses within Logitech Options Plus on macOS. This allows attackers to execute...

9.8CVSS8.6AI score0.04333EPSS
SaveExploits2References8
GithubExploit
GithubExploit
added 2024/09/06 6:15 a.m.100 views

Exploit for Code Injection in Deskfiler

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...

9.8CVSS9.9AI score0.01598EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2024/09/06 6:13 a.m.93 views

Exploit for Open Redirect in Nteract

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...

9.8CVSS10AI score0.01686EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2024/09/06 6:11 a.m.123 views

Exploit for Cross-site Scripting in Goanother Another_Redis_Desktop_Manager

Another Redis Desktop Manager PoC A Proof-Of-Concept for CVE-2...

9.6CVSS9.9AI score0.00711EPSS
SaveExploits2
NVD
NVD
added 2024/09/02 7:15 p.m.21 views

CVE-2024-45621

The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related to failure to use a separate browser upon encountering third-party external actions from PDF documents...

5.4CVSS0.00287EPSS
SaveExploits0References2
Rows per page
Query Builder