5790 matches found
CVE-2016-9071
Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. This vulnerability affects Firefox 50...
CVE-2016-9071
Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. This vulnerability affects Firefox 50...
CVE-2017-7844
CVE-2017-7844 【Firefox】 is caused by a combination of an external SVG image on a page and coloring of links within that image, enabling a malicious site to infer which pages a user has visited in history. Affected: Firefox 57; earlier releases are not affected. The issue is mitigated by upgrading...
CVE-2017-7844
A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier...
Threat Outbreak Alert RuleID32920: Email Messages Distributing Malicious Software on June 8, 2018
Medium Alert ID: 58080 First Published: 2018 June 8 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32920 may contain the following files: Name | Size...
SleuthQL - Burp History Parsing Tool To Discover Potential SQL Injection Points
SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. Supported Request Types SleuthQL requires an export of Burp's Proxy History...
Malicious Typo-Squatting
jquey is a maliciously typo-squatting package. During the installation of this package, the user’s private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
coffescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
cofeescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
cofee-script is a maliciously typo-squatting package. During the installation of these packages, the user's private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
coffe-script is a maliciously typo-squatting package. During the installation of these packages, the user's private SSH key and bash history are set to a third party server...
Threat Outbreak Alert RuleID32912: Email Messages Distributing Malicious Software on June 7, 2018
Medium Alert ID: 58062 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32912 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID32904: Email Messages Distributing Malicious Software on June 7, 2018
Medium Alert ID: 58060 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32904 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID32891: Email Messages Distributing Malicious Software on June 7, 2018
Medium Alert ID: 58037 First Published: 2018 June 7 15:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32891 may contain the following files: Name | Size...
CVE-2017-16206
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16204
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...