1361 matches found
CVE-2026-126084
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, when a GCS service is configured with the cachecontrol option, ActiveStorage::Service::GCSServiceurlfordirectupload signs direct-upload URL...
of-CORS
of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...
cve-2024-55591-poc
CVE-2024-55591 - Fortinet FortiOS Authentication Bypass An educational implementation in Go demonstrating the technical mechanics of CVE-2024-55591 , an authentication bypass vulnerability affecting Fortinet FortiOS. This repository is intended strictly for security research, defensive analysis,...
CLEANSTART-2024-WV69351 When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...
CVE-2020-26976 affects multiple packages. When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the insecure framing...
CLEANSTART-2024-DZ06996 Inappropriate implementation in Service Worker API in Google Chrome prior to 97
Security vulnerability affects the qt5-qtwebengine package. Inappropriate implementation in Service Worker API in Google Chrome prior to 97...
ls-poc
CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...
CLEANSTART-2024-YL50966 When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the ifram...
CVE-2020-26976 affects multiple packages. When a HTTPS pages was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the insecure framing...
Astra Linux – vulnerability in Firefox
DOM mitigation bypass: Service Worker component. This vulnerability has been fixed in Firefox 153 and Thunderbird 153...
Astra Linux – vulnerability in Firefox
DOM mitigation bypass: Service Worker component. This vulnerability has been fixed in Firefox 153 and Thunderbird 153...
CLSA-2026-1792386713 TuxCare security update for @angular/service-worker (2 CVEs)
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 10.2.5-tuxcare.10...
CLSA-2026-1792386714 TuxCare security update for @angular/service-worker (2 CVEs)
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 15.2.2-tuxcare.3...
CLSA-2026-1792386712 TuxCare security update for @angular/service-worker (1 CVE)
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 17.1.0-tuxcare.3...
CLSA-2026-1792386711 TuxCare security update for @angular/service-worker (1 CVE)
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 9.1.13-tuxcare.11...
CLSA-2026-1792386590 TuxCare security update for @angular/service-worker (3 CVEs)
TuxCare rebuilt @angular/service-worker to address 3 CVEs. Fixed in 16.2.7-tuxcare.3...
CLSA-2026-1792386589 TuxCare security update for @angular/service-worker (1 CVE)
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 5.1.0-tuxcare.4...
CLSA-2026-1792386588 TuxCare security update for @angular/service-worker (2 CVEs)
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 13.3.11-tuxcare.2...
CLSA-2026-1792386587 TuxCare security update for @angular/service-worker (4 CVEs)
TuxCare rebuilt @angular/service-worker to address 4 CVEs. Fixed in 5.2.7-tuxcare.4...
CLSA-2026-1792386586 TuxCare security update for @angular/service-worker (2 CVEs)
TuxCare rebuilt @angular/service-worker to address 2 CVEs. Fixed in 10.1.0-tuxcare.3...