SUSE CVE-2020-14154

Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate...

SUSE CVE-2020-14342

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

SUSE CVE-2021-23956

An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox 85...

SUSE CVE-2021-29959

When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt. This was only possible if the website kept recording with the microphone until re-enabling the camera. This...

SUSE CVE-2021-38508

By displaying a form validity message in the correct location at the same time as a permission prompt such as for geolocation, the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox 94,...

SUSE CVE-2021-45444

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPTSUBST expansion...

SUSE CVE-2022-34474

Even when an iframe was sandboxed with allow-top-navigation-by-user-activation, if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate. This vulnerability affects Firefox 102...

SUSE CVE-2022-38474

A website that had permission to access the microphone could record audio without the audio notification being shown. This bug does not allow the attacker to bypass the permission prompt - it only affects the notification shown once permission has been granted.This bug only affects Firefox for...

SUSE CVE-2022-45404

Through a series of popup and window.print calls, an attacker can cause a window to go fullscreen without the user seeing the notification prompt, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

MAL-2023-2007 Malicious code in prompt-toollkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cd4ed78a11c95724967c6161e24facba220d07404deff69a75ce6a5ce9e93015 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-oolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01a684f148e0fd583e1f56464297de201abdc9c46efa728d260f73ccfc267c58 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67f4170733963d2ade7be2010fb5c4c24ed1c75eee0cf35b6838e0435bafbaf9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolikt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c36e96006a4f013f897b66377119f00de5576d5cb83cc51707f22c0584f13971 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolkkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c4c251d3a780df7d6fe90e182237b6e011ea4e21c2e694611658bd6e4c278689 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 675eb0f2bc82cc672a20e6da1b01697163dfbfbc9b6fb7267b2b465f16529cb9 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rpompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05be5d6a062bc1224c9200151a585d89bdde5fa9501a0a275f5eb52d8a12da54 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-ttoolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 83a7c035b47cdee736e3de62713b91b185c29321810f07db52665cb4c7dcabdc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tolokit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ba892f026b006a8e401d7c839fb9af77acfef47ea4f290a33a8c7c0931a3d4e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1996 Malicious code in prompt-tolokit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1ba892f026b006a8e401d7c839fb9af77acfef47ea4f290a33a8c7c0931a3d4e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-tookit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5d92327d14ed9c546cc8da4686d6444e8618ca3ee12fa7dcc1e887f63378235e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...