430 matches found
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 147, which originates from a denial of service in the DOM Service Workers component...
CVE-2026-0889: Uncontrolled Resource Consumption
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
EUVD-2016-6238
Malware in sbrugna...
EUVD-2018-4332
Malware in sbrugna...
EUVD-2018-17854
Malware in sbrugna...
EUVD-2021-24483
Malware in sbrugna...
EUVD-2019-15394
Malware in sbrugna...
EUVD-2018-16927
Malware in sbrugna...
EUVD-2016-6083
Malware in sbrugna...
EUVD-2016-3038
Malware in sbrugna...
EUVD-2022-48289
Malicious code in bioql PyPI...
Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network
The threat actor known as Vane Viper has been outed as a purveyor of malicious ad technology adtech, while relying on a tangled web of shell companies and opaque ownership structures to deliberately evade responsibility. "Vane Viper has provided core infrastructure in widespread malvertising, ad...
CVE-2025-58765 wabac.js has XSS vulnerability in 404 error handling logic
wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...
PT-2025-36954
Name of the Vulnerable Software and Affected Versions: wabac.js versions 2.23.10 and below Description: wabac.js provides a full web archive replay system using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic. The requestURL parameter,...
Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.
...
Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.
...
Linux Distros Unpatched Vulnerability : CVE-2022-45417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited ...
Linux Distros Unpatched Vulnerability : CVE-2023-32208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113. CVE-2023-32208 Note that Nessus relies on the presen...
