MAL-2023-1788 Malicious code in discord-webhoo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fa7963a8da1102b0d2c2eae15aeecd878adb1416bc8c66b6e4a7384f16c5d32d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sleenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c4ea3a06cb61d4b5b9b24839db0b9f4d57dec74215095de114d48479c4af2c0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Google Chrome Out-of-Bounds Read Vulnerability (CNVD-2023-12022)

Google Chrome is a web browser from Google, an American company. An out-of-bounds read vulnerability exists in versions of Google Chrome prior to 110.0.5481.77. The vulnerability stems from the lack of proper validation of user-supplied data in WebRTC, where specially crafted data may trigger a...

The vulnerability of the Core web browser component in Google Chrome, which allows a hacker to increase their privileges

The vulnerability of the Core web browser component in Google Chrome is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to trigger memory corruption and elevate their privileges to the root level...

Malicious code in wwebsockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d9ac53e153cfdacc0c0acbb6efed677bb982bfc33626bbd58a67a0719e08250d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in webssockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33218237eb5a89cad81db80c5bb65d594f15f397071a0fca8e21c53f63885b75 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion

The plugin does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication such as update and delete the auth key. As a contributo...

Replyable < 2.2.10 - Subscriber+ PHP Object Injection

The plugin does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could...

Replyable < 2.2.10 - Subscriber+ PHP Object Injection

The plugin does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could...

[SECURITY] Fedora 37 Update: chromium-109.0.5414.119-1.fc37

Chromium is an open-source web browser, powered by WebKit Blink...

Magazine Edge <= 1.13 - Subscriber+ Arbitrary Plugin Activation

The theme does not have authorisation and CSRF when activating plugins via an AJAX action, allowing any authenticated users, such as subscriber to activate arbitrary plugins Run the below command in the developer console of the web browser while being on the blog as a subscriber user...

CVE-2023-23469: Use of Web Browser Cache Containing Sensitive Information

IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504...

Microsoft Edge (Chromium) < 109.0.1518.52 Elevation of Privilege (CVE-2023-21795)

The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.52. It is, therefore, affected by a vulnerability as referenced in the January 13, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This CVE ID is unique from...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in the Google Chrome ServiceWorker API that stems from type confusion...

Oracle Linux 9 : firefox (ELSA-2023-0285)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-0285 advisory. 102.7.0-1.0.1 - Updated homepages to use https Orabug: 34648274 102.7.0-1 - Update to 102.7.0 build1 102.6.0-2 - Add firefox-x11 subpackage to allow...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RLSA-2023:0288 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.7.0 ESR. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2023:0285 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.7.0 ESR. Security Fixes: Mozilla: libusrsctp library out of date CVE-2022-46871 Mozilla: Arbitrary file read from GTK drag and drop on Linux...