domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

[SECURITY] Fedora 45 Update: epiphany-51.0-2.fc45

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...

Linux Distros Unpatched Vulnerability : CVE-2026-94291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

CLEANSTART-2024-RA01246 XSS can occur in GNOME Web (aka Epiphany) before 40

Security vulnerability affects the epiphany package. XSS can occur in GNOME Web aka Epiphany before 40...

CLEANSTART-2024-AR44894 In GNOME Epiphany before 41

Security vulnerability affects the epiphany package. In GNOME Epiphany before 41...

[SECURITY] Fedora 45 Update: epiphany-51.0-1.fc45

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...

Fedora 45 : adwaita-icon-theme / dconf / epiphany / gcr / gdm / gjs / etc (2026-48a7996f9c)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-48a7996f9c advisory. GNOME 51.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue b...

CVE-2026-94292

A flaw was found in Epiphany GNOME Web. The autofill visibility check only tests an element's on-screen size and fails to detect form fields hidden via CSS properties such as display:none, visibility:hidden, or opacity:0. A malicious web page can include hidden form fields that are silently...

CVE-2026-94291

A flaw was found in Epiphany GNOME Web. The ephy-reader and view-source URI schemes are not registered as display-isolated, allowing a remote attacker to frame them from web content via iframes. This can be exploited to exfiltrate local files when a user visits a malicious website...

[SECURITY] Fedora 43 Update: epiphany-49.9.1-1.fc43

Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...

Fedora 43 : epiphany (2026-e205f21e0d)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e205f21e0d advisory. Automatic update for epiphany-49.9.1-1.fc43. Changelog for epiphany Thu Aug 13 2026 Packit - 1:49.9.1-1 - Update to 49.9.1 upstream release Tenable...

CVE-2026-77679

A path traversal ZIP slip vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, the decompressxpithread function extracts XPI archives ZIP format to disk using libarchive. For each archive entry, the output path i...

PT-2026-81043

Name of the Vulnerable Software and Affected Versions Epiphany affected versions not specified Description A flaw exists in the form autofill script where the browser fails to escape an HTML form element ID before interpolating it into a CSS selector. A malicious website can provide a crafted ID...

Linux Distros Unpatched Vulnerability : CVE-2026-77682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JavaScript code injection in autofill via unsanitized CSS selector from element id fedora-all CVE-2026-77682 Note that Nessus relies on the presence of the...

CVE-2026-77682

A code injection vulnerability exists in Epiphany when the user invokes form autofill from the context menu on a page containing a malicious HTML form. In embed/web-process-extension/resources/js/ephyautofill.js, getSelector builds a CSS selector by directly interpolating an element's id attribut...

SUSE CVE-2026-18487

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...

EUVD-2026-54296

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...

Linux Distros Unpatched Vulnerability : CVE-2026-18487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user click...

CVE-2026-18487

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...

DEBIAN-CVE-2026-18487

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...