1990 matches found
Amazon Linux 2 : firefox (ALASFIREFOX-2023-009)
The version of firefox installed on the remote host is prior to 102.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2023-009 advisory. Service Workers should not be able to infer information about opaque cross-origin responses; but timing informatio...
Google Chrome < 107.0.5304.106 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.106. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. - Heap buffer overflow in Crashpad in Google Chrome on Android prior to...
North Korea's Lazarus Group Suspected in $31 Million CoinEx Heist
The North Korea-affiliated Lazarus Group has stolen nearly $240 million in cryptocurrency since June 2023, marking a significant escalation of its hacks. According to multiple reports from Certik, Elliptic, and ZachXBT, the infamous hacking group is said to be suspected behind the theft of $31...
HPE Aruba Networking Virtual Intranet Access 安全漏洞
Hewlett Packard Enterprise Aruba Networking Virtual Intranetxa0Access is part of a remote networking solution for remote workers and mobile users from Hewlett Packard Enterprise USA. A security vulnerability exists in HPE Aruba Networking Virtual Intranet Access that originated from a vulnerabili...
Mozilla Firefox Security Advisories (MFSA2023-26, MFSA2023-31) - Windows
Mozilla Firefox is prone to multiple use-after-free vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SUSE: Security Advisory (SUSE-SU-2023:2959-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2023:2958-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MAL-2023-1152 Malicious code in deploy-workers-cloudflare-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fc56c152b28aec95059aa473a4a560558083997bf0bb390a71e672fcd73b29 The OpenSSF Package Analysis project identified 'deploy-workers-cloudflare-com' @ 9.1.0 npm as malicious. It is considered malicious because: -...
Malicious code in deploy-workers-cloudflare-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fc56c152b28aec95059aa473a4a560558083997bf0bb390a71e672fcd73b29 The OpenSSF Package Analysis project identified 'deploy-workers-cloudflare-com' @ 9.1.0 npm as malicious. It is considered malicious because: -...
USN-6218-1 firefox vulnerability
A use-after-free was discovered in Firefox when handling workers. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code...
GHSA-9VRM-V9XV-X3XR HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...
HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured
HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...
Phishing scam takes $950k from DoorDash drivers
A particularly nasty slice of phishing, scamming, and social engineering is responsible for DoorDash drivers losing a group total of around $950k. DoorDash drivers are contractors who pick up food deliveries from stores and restaurants and deliver the products to the customer. A 21 year old man...
CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
Design/Logic Flaw
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
CVE-2023-32208
Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...
CVE-2023-32208
CVE-2023-32208 describes a vulnerability in Mozilla Firefox prior to 113 where service workers could reveal the script base URL due to dynamic import(). The issue is limited to Firefox versions earlier than 113, with a CVSS v3.1 base score of 5.3 (Medium), affecting the confidentiality impact onl...
