CVE-2024-47484

creationtimestamp| type| source ---|---|--- 2024-12-10 10:34:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113628075982373757 2024-12-10 13:17:27+00:00| seen| https://t.me/cvedetector/12493 2024-12-16 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1693/...

CVE-2023-50904

creationtimestamp| type| source ---|---|--- 2024-12-09 14:46:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113623406340867935...

CVE-2023-50887

creationtimestamp| type| source ---|---|--- 2024-12-09 14:31:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113623347312984117...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-12270

creationtimestamp| type| source ---|---|--- 2024-12-07 09:44:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113610893279323997 2024-12-07 11:41:57+00:00| seen| https://t.me/cvedetector/12316 2025-01-06 20:20:04+00:00| seen|...

CVE-2024-11329

creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066916483610 2024-12-07 04:10:52+00:00| seen| https://t.me/cvedetector/12309...

CVE-2024-54747

creationtimestamp| type| source ---|---|--- 2024-12-06 15:37:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113606618227054679 2024-12-06 18:07:56+00:00| seen| https://t.me/cvedetector/12236...

CVE-2024-54207

creationtimestamp| type| source ---|---|--- 2024-12-06 15:05:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113606494323979888 2024-12-06 16:27:26+00:00| seen| https://t.me/cvedetector/12218...

CVE-2024-51815

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066022271275 2024-12-06 13:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080923087323...

CVE-2024-52335

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066036348865 2024-12-06 13:20:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080937405119 2024-12-06 20:06:36+00:00| published-proof-of-concept|...

CVE-2024-11352

creationtimestamp| type| source ---|---|--- 2024-12-06 09:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113605081727215425 2024-12-06 10:36:09+00:00| seen| https://t.me/cvedetector/12191...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems, Inc.QNAP Systems QTS is an entry-level operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...

CVE-2024-12235

creationtimestamp| type| source ---|---|--- 2024-12-05 17:38:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113601431917341690 2024-12-05 20:22:53+00:00| seen| https://t.me/cvedetector/12131...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-54127

creationtimestamp| type| source ---|---|--- 2024-12-05 12:32:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113600229631592844 2024-12-05 15:21:15+00:00| seen| https://t.me/cvedetector/12082...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-53614

creationtimestamp| type| source ---|---|--- 2024-12-04 15:56:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113595368251611466 2024-12-04 17:35:56+00:00| seen| https://t.me/cvedetector/12010...

GHSA-JCXM-7WVP-G6P5

creationtimestamp| type| source ---|---|--- 2024-12-04 15:30:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113595269145037059 2024-12-04 19:41:19+00:00| seen| https://infosec.exchange/users/obivan/statuses/113596254096758916 2026-07-23 19:00:49+00:00| seen|...