CVE-2024-40618

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension...

CVE-2024-40618

The Whale browser (prior to version 3.26.244.21 ) is vulnerable to a Cross-Site Scripting (XSS) flaw due to improper sanitization or cleanup when processing a built-in extension . This allows an attacker to execute malicious JavaScript. Remediation involves updating the browser to version 3.26.24...

CVE-2024-40618

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension...

Naver Whale Browser Security Vulnerability

Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 3.26.244.21, which stems from improper cleanup when dealing with built-in extensions, allowing an attacker to...

PT-2024-28945 · Unknown · Whale Browser

Name of the Vulnerable Software and Affected Versions: Whale browser versions prior to 3.26.244.21 Description: The issue allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension. Recommendations: For versions prior to 3.26.244.21, updat...

CVE-2024-40618: Improper Neutralization of Input During Web Page Generation

Whale browser before 3.26.244.21 allows an attacker to execute malicious JavaScript due to improper sanitization when processing a built-in extension...

Malicious code in watch-here-where-to-watch-the-whale-streaming-free-on-streaming-at-home6 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in watch-here-where-to-watch-the-whale-streaming-free-on-streaming-at-home1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Whale Song Code

During the Cold War, the US Navy tried to make a secret code out of whale song. The basic plan was to develop coded messages from recordings of whales, dolphins, sea lions, and seals. The submarine would broadcast the noises and a computer--the Combo Signal Recognizer CSR--would detect the specif...

whaletrail.co.za Cross Site Scripting vulnerability OBB-3884976

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-7226

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

CVE-2023-7226

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

Design/Logic Flaw

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

CVE-2023-7226

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

CVE-2023-7226

CVE-2023-7226 affects meetyoucrop big-whale v1.1, specifically the Admin Module endpoint /auth/user/all.api. The root cause is manipulation of the id parameter in that endpoint, leading to improper ownership management. Documents consistently note remote exploit potential and public disclosure of...

CVE-2023-7226 meetyoucrop big-whale Admin Module all.api improper ownership management

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

meetyoucrop big-whale security breach

big-whale is a task scheduling platform open-sourced by Meiyu meetyoucrop. A security vulnerability exists in meetyoucrop big-whale version 1.1, which stems from the presence of an unknown function in /auth/user/all.api in the component Admin Module, which leads to ownership mismanagement via the...

PT-2024-15237 · Unknown · Meetyoucrop Big-Whale

Name of the Vulnerable Software and Affected Versions: meetyoucrop big-whale version 1.1 Description: A critical issue affects some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the id argument leads to improper ownership management. The...

CVE-2023-7226: Improper Ownership Management

A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be...

whalewatchinginla.com Improper Access Control vulnerability OBB-3815678

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...