quasar

Quasar Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation sudo apt-get install git git clone...

quasar-app-webpack-json5-vulnerability

Quasar App quasar-app-webpack-json5-vulnerability A Quasar Project Install the dependencies yarn or npm install Start the app in development mode hot-code reloading, error reporting, etc. quasar dev Lint the files yarn lint or npm run lint Format the files yarn format or npm run format Build the...

Quasar

Quasar Free, Open-Source Remote Administration Tool for Windows Quasar is a fast and light-weight remote administration tool coded in C. The usage ranges from user support through day-to-day administrative work to employee monitoring. Providing high stability and an easy-to-use user interface,...

CVE-2026-106108

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

CVE-2026-106108 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

EUVD-2026-98736

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

CVE-2026-106108 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

CVE-2026-106108 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

CVE-2026-106108

The Quasar Framework (specifically @quasar/app-vite ) versions 3.1.0 through 3.3.0 are vulnerable to a path traversal issue during SSG builds. The getSsgPages() function fails to verify that dir and filename values remain within the build.distDir, allowing for the creation of files or directories...

CVE-2026-106108: Improper Limitation of a Pathname to a Restricted Directory

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages could supply dir and filename values that were joined to build.distDir without verifying the final destination. Parent...

Quasar Framework path traversal vulnerability

Quasar Framework versions 2.22.0 to 2.23.3 had a path traversal vulnerability. This vulnerability stemmed from the dir and filename parameters in the SSG page definitions returned by getSsgPages in @quasar/app-vite. These parameters were concatenated with build.distDir without proper validation o...

EUVD-2026-93516

Quasar Framework: DOM Clobbering in Quasar openURL SafariViewController Integration Causes Client-Side Denial of Service...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +12 more potentially affected by CVE-2026-106101 via quasar (>=2.0.0-beta.1, <=2.18.7)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =0.1.0, =0.15.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-106101 Source advisory: GHSA-89VP-X45C-52CQ...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +12 more potentially affected by CVE-2026-106101 via quasar (>=2.0.0-beta.1, <=2.18.7)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =0.1.0, =0.15.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-106101 Source advisory: OSV:GHSA-89VP-X45C-52CQ...

Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...

NPM: Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

NPM: Quasar Framework: DOM Clobbering in Quasar openURL SafariViewController Integration Causes Client-Side Denial of Service vulnerability discovered by ? in WordPress Npm quasar versions = 2.32.1...

GHSA-89VP-X45C-52CQ Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...

EUVD-2026-93570

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions...

@docsector/docsector-reader (>=0.2.3, <=4.29.2), @quasar/app-vite (>=2.6.0, <=2.6.2) +3 more potentially affected by CVE-2026-106105 via @quasar/ssl-certificate (2.0.0)

@quasar/ssl-certificate NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @quasar/ssl-certificate and may be impacted: - @docsector/docsector-reader =0.2.3, =2.6.0, =0.1.0, =2.1.13, =2.0.0-beat.2, =2.0.0-beta.5 Source cves:...

@docsector/docsector-reader (>=0.2.3, <=4.29.2), @quasar/app-vite (>=2.6.0, <=2.6.2) +3 more potentially affected by CVE-2026-106105 via @quasar/ssl-certificate (2.0.0)

@quasar/ssl-certificate NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @quasar/ssl-certificate and may be impacted: - @docsector/docsector-reader =0.2.3, =2.6.0, =0.1.0, =2.1.13, =2.0.0-beat.2, =2.0.0-beta.5 Source cves:...