Google Chrome PictureInPicture Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome PictureInPicture, which can be exploited by attackers to bypass security restrictions...

Google Chrome CORS Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome CORS security bypass vulnerability can be exploited by attackers to bypass security restrictions...

Google Chrome OS Inputs Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome OS Inputs, which can be exploited by an attacker to execute arbitrary code or cause a denial of service condition on a system...

Meta Takes Down Malware Campaign That Used ChatGPT as a Lure to Steal Accounts

Meta said it took steps to take down more than 1,000 malicious URLs from being shared across its services that were found to leverage OpenAI's ChatGPT as a lure to propagate about 10 malware families since March 2023. The development comes against the backdrop of fake ChatGPT web browser extensio...

The vulnerability of the Full Screen Mode implementation of the Google Chrome browser allows a hacker to conceal the content of the Omnibox address bar.

The vulnerability of Google Chrome’s full-screen mode implementation is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to conceal the content of the Omnibox address bar...

apache-spark: XSS vulnerability in log viewer UI Javascript

A stored cross-site scripting XSS flaw was found in Apache Spark. This issue allows an attacker to execute arbitrary JavaScript in the web browser of a user, including a malicious payload into the logs which are returned in logs rendered in the UI...

K000132726: BIG-IP Configuration utility XSS vulnerability CVE-2023-27378

Security Advisory Description Multiple reflected cross-site scripting XSS vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility that allow an attacker to run JavaScript in the context of the currently logged-in user. CVE-2023-27378 Impact An attacker may exploit this...

Mozilla Firefox: Multiple Vulnerabilities

Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

Malicious code in staging-opbox-web-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbd6d4cfbb58ae5a7f14b26eb9cf8b4f593b5542ada8603e96b5c6edf7ebe211 The OpenSSF Package Analysis project identified 'staging-opbox-web-browser' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1304 Malicious code in staging-opbox-web-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbd6d4cfbb58ae5a7f14b26eb9cf8b4f593b5542ada8603e96b5c6edf7ebe211 The OpenSSF Package Analysis project identified 'staging-opbox-web-browser' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

[SECURITY] Fedora 38 Update: chromium-112.0.5615.165-1.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora: Security Advisory for chromium (FEDORA-2023-911c060ded)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 249327...

CVE-2023-27864: Improper Neutralization of Input During Web Page Generation

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 249327...

Fedora: Security Advisory for chromium (FEDORA-2023-fa739b5753)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for chromium (FEDORA-2023-2b6ba1c253)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: chromium-112.0.5615.165-1.fc36

Chromium is an open-source web browser, powered by WebKit Blink...

Cannot add ADC URL to workspace with cannot connect to Server Error

Cannot add ADC URL to workspace with cannot connect to Server Error ADC use as gateway, with external environment Can access via Web browser and launch resource...

CVE-2021-44775

Cross-site scripting XSS issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents...

YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi

The plugin does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks. Run the below command in the developer console of the web browser while being on the blog...