352 matches found
shadow-workers
Shadow Workers 信息 Shadow Workers 是一个免费开源的 C2 和代理工具，专为渗透测试人员设计，用于帮助利用 XSS 和恶意 Service Workers（SW）。 只要 SW（代理）处于活动状态，成功利用后你便可以以受害者的身份浏览目标应用程序。受害者无需在应用程序中打开浏览器标签页，代理也能保持活动。 如何使用 Shadow Workers 网站 TrustedSec 关于该工具的博客文章：...
Astra Linux – Vulnerability in Chromium
The use of after-free in ServiceWorkers in Google Chrome before version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
UBUNTU-CVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component. This...
CVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component. This...
CVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74956
Firefox and Thunderbird's DOM: Service Workers component has a same-origin policy bypass allowing cross-origin data access and manipulation. CVSS 9.1 (critical). Fixed in Firefox 154, ESR 153.1, Thunderbird 154, and 153.1. No exploitation reported in provided documents. Debian/Ubuntu users withou...
CVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers component
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74956 Same-origin policy bypass in the DOM: Service Workers component
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
EUVD-2026-60683
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
PT-2026-76989
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A same-origin policy bypass exists within the DOM: Service Workers component. The same-origin...
Astra Linux – Vulnerability in Chromium
In ServiceWorkers of Google Chrome prior to version 147.0.7727.55, bypassing the content security policy was possible when a remote attacker used a crafted HTML page. Chromium security severity: Low...
CVE-2026-16407
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Service Workers component...
CVE-2026-16382
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Service Workers component...
Linux Distros Unpatched Vulnerability : CVE-2026-16382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16382 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2026-16407
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16407 Note that Nessus relies...
Astra Linux – Vulnerability in Chromium
The use of after-free in ServiceWorkers in Google Chrome before version 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-16382
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...