CVE-2024-4367-PoC

CVE-2024-4367 & CVE-2024-34342 : Exécution arbitraire de JavaScript dans PDF.js Un contrôle de type manquait lors du traitement des polices dans PDF.js, ce qui permettait une exécution arbitraire de JavaScript dans le contexte de PDF.js. Cette vulnérabilité affecte Firefox 126, Firefox ESR 115.11...

[SECURITY] [DLA 4754-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4754-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 25, 2026 https://wiki.debian.org/LTS -...

CVE-2024-4367-Analysis

CVE-2024-4367: PDF.js에서의 임의 JavaScript 실행 개요 CVE-2024-4367은 PDF.js 라이브러리의 심각한 취약점으로, 사용자 브라우저에서 임의 JavaScript를 실행할 수 있게 하여 크로스 사이트 스크립팅XSS 공격을 유발합니다. 이는 Firefox 예시: python3 poc.py "alert1" 데모 영상 데모 1 Firefox...

CVE-2025-1015

CVE-2025-1015: يحتوي دفتر عناوين ثندربيرد على حقول URI غير معقمة يمكن استغلالها من قبل المهاجمين. من خلال إنشاء دفتر عناوين يحتوي على روابط ضارة، قد يخدع المهاجم مستخدمًا آخر لاستيراد دفتر العناوين المخترق. إذا نقر المستخدم على الرابط غير المعقم داخل ثندربيرد، فقد يؤدي ذلك إلى تنفيذ تعسفي لجافا...

firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: CanvasWebGL component...

firefox: thunderbird: Use-after-free in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Text component...

firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...

firefox: thunderbird: Same-origin policy bypass in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

firefox: thunderbird: Site isolation issue in the WebExtensions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

firefox: thunderbird: Information disclosure in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics component...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

firefox: thunderbird: Privilege escalation in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...

firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...

firefox: thunderbird: Privilege escalation in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Networking: Cookies component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...