FUEL CMS 跨站脚本漏洞

FUEL CMS is a content management system based on CodeIgniter. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variable in FUEL CMS 1.4.11. An attacker can exploit this vulnerability to steal cookies...

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

Privilege Escalation

chromium is vulnerable to privilege escalation. Insufficient policy enforcement in the Intents allows a local attacker to bypass navigation restrictions via malicious Intents...

Privilege Escalation

chromium is vulnerable to privilege escalation. Insufficient data validation in navigation allows a remote attacker who has compromised the renderer process to bypass navigation restrictions via a malicious HTML page...

Authorization Bypass

chromium is vulnerable to authorization bypass. Insufficient validation of untrusted input in command line handling allows a remote attacker to bypass navigation restrictions via a malicious HTML page...

Authorization Bypass

chromium is vulnerable to authorization bypass. The vulnerability exists through insufficient policy enforcement in intent handling that allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Authorization Bypass

chromium is vulnerable to authorization bypass. The vulnerability exists through insufficient policy enforcement in iOSWeb that allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Navigation Restriction Bypass

chromium is vulnerable to Navigation Restriction Bypass. Inappropriate implementation in iframe sandbox in Google Chrome allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Mozilla Firefox 输入验证错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 84, whereby when a user types a URL into the address bar or search bar and quickly presses the enter key, the website sometimes...

VulnCheck KEV: CVE-2020-17463

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items...

Uc365 site navigation open source version of da***.php file file upload vulnerability

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of da.php file file upload vulnerability . Attackers can use the vulnerability to upload...

Uke365 URL navigation open source version of the da***.php file has a logic flaw vulnerability

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of da.php file has a logic flaw vulnerability . Attackers can exploit the vulnerability to dele...

Authorization Bypass

chromium is vulnerable to authorization bypass. The library does not properly handle download origins in Navigation in Google Chrome, allowing a malicious user to perform domain spoofing via a crafted HTML page...

SPIP parameter improper validation vulnerability

SPIP, an Internet publishing system, is free software distributed under the General Public License GPL. prive/formulaires/configurerpreferences.php in versions of SPIP prior to 3.2.8 is vulnerable to couleur, display, display navigation, displayoutils, imessage, and spipecran parameters are...

Code Execution Vulnerability in Win8 URL Navigation Source 1.0

Win8 website navigation whole site using html5+css+jquery layout, static version of a single page. Win8 URL navigation source code 1.0 code execution vulnerability, an attacker can use the vulnerability to obtain control of the server...

Robot Vacuums Suck Up Sensitive Audio in ‘LidarPhone’ Hack

Researchers have uncovered a new attack that lets bad actors snoop in on homeowners’ private conversations – through their robot vacuums. The vacuums, which utilize smart sensors in order to autonomously operate, have gained traction over the past few years. The attack, called “LidarPhone” by...

CVE-2020-16029

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...

Google Chrome PDFium Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A PDFium improperly implemented vulnerability exists in versions of Google Chrome prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A PDFium improperly implemented vulnerability exists in versions of Google Chrome prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass...

PT-2023-13770 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient limitations in some quiz web services, allowing students to bypass sequential navigation during a quiz attempt. Recommendations: At the moment, there is ...