209 matches found
SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution
A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the eval function within the Perl CGI component ciwweb.pl, where attacker-supplied input inside hidRandomACARAT is directly...
lightkeeper
lightkeeper A port of the Lighthouse plugin to GHIDRA. Icons made by Pixel perfect from www.flaticon.com...
CVE-2025-34300POC
Sawtooth Lighthouse Studio has a template injection vulnerability CVE-2025-34300 Parameters: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Examples: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测; python .\CVE-2025-34300POC....
Lighthouse Component Protected Information Access
The vulnerability in the Lighthouse component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
lighthouse
Lighthouse - Ein Coverage Explorer für Reverse Engineers Überblick Lighthouse ist ein leistungsstarker Code-Coverage-Explorer für IDA Pro und Binary Ninja, der Software-Forschern einzigartig interaktive Steuerelemente bietet, um Ausführungsmaps für native Anwendungen zu untersuchen, ohne dass...
Astra Linux – vulnerability in Chromium
The lack of authorization checks in Lighthouse within Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and used social engineering to bypass site isolation by submitting a specially crafted HTML page. Chromium security severity: Mediu...
lightkeeper v1.4.1
lightkeeper A port of the Lighthouse plugin to GHIDRA. Icons made by Pixel perfect from www.flaticon.com...
Malicious code in lighthouse-beetroot-3esx (npm)
The package lighthouse-beetroot-3esx was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lighthouse-beetroot-uw5y (npm)
The package lighthouse-beetroot-uw5y was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lighthouse-quinoa-v6vv (npm)
The package lighthouse-quinoa-v6vv was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lighthouse-vinegar-neu2 (npm)
The package lighthouse-vinegar-neu2 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in lighthouse-date-hf2i (npm)
The package lighthouse-date-hf2i was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in juliet-lighthouse-il5w (npm)
The package juliet-lighthouse-il5w was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in grape-lighthouse-8yb7 (npm)
The package grape-lighthouse-8yb7 was found to contain malicious code. --- Credit: OpenSSF source...
Chromium: CVE-2026-79053 Missing authorization in Lighthouse
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-79053
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79053
A flaw was found in Lighthouse in Google Chrome. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page to the...
Linux Distros Unpatched Vulnerability : CVE-2026-79053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged...
DEBIAN-CVE-2026-79053
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79053
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...