Updated gnome-shell packages fix a security vulnerability

The updated packages fix a security vulnerability: GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool. CVE-2023-43090...

CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40127

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Code injection

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard postMessage API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the web...

CVE-2023-5718

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard postMessage API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the web...

CVE-2023-5718

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard postMessage API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the web...

CVE-2023-5718

CVE-2023-5718 affects the Vue.js Devtools extension. The issue allows leakage of base64-encoded screenshots of sensitive resource content via the standard postMessage() API when a malicious page with an iframe targets a sensitive resource and registers a listener. Affected component: the Vue.js D...

CVE-2023-5718

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard "postMessage" API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the we...

Vue.js vue-devtools Access Control Error Vulnerability

vue-devtools is a browser development tools extension for debugging Vue.js applications. A security vulnerability exists in Vue.js vue-devtools, which stems from the fact that the extension was found to leak screenshot data back to a malicious web page, postMessage, via the standard API...

PT-2023-32289 · Unknown · Vue.Js Devtools Extension

Name of the Vulnerable Software and Affected Versions: Vue.js Devtools extension affected versions not specified Description: The Vue.js Devtools extension leaks screenshot data back to a malicious web page via the standard postMessage API. This occurs when a malicious web page with an iFrame...

CVE-2023-5718: Exposure of Sensitive Information to an Unauthorized Actor

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard postMessage API. By creating a malicious web page with an iFrame targeting a sensitive resource i.e. a locally accessible file or sensitive website, and registering a listener on the web...

The vulnerability of the TCC component in operating systems like watchOS and macOS allows a hacker to capture user screenshots.

The vulnerability of the TCC component in operating systems like watchOS and macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to capture user screens remotely...

CVE-2023-41308

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-41308

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality...

Design/Logic Flaw

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2023-41308

Huawei HarmonyOS contains a CVE-2023-41308 screenshot vulnerability in the input module. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, no privileges required, no user interaction, and a confidentiality impact (I) of HIGH while integrity and availability are ...

CVE-2023-41308

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality...

PT-2023-27895 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality. There is no...

Exploit for Untrusted Pointer Dereference in Microsoft

PoC for CVE-2023-29360 Exploit targeting MSKSSRV.S...

DEBIAN-CVE-2023-43090

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool...