paniclock

PanicLock es una utilidad de la barra de menús de macOS que desactiva instantáneamente Touch ID y bloquea la pantalla con un solo clic o cerrando la tapa de tu portátil. PanicLock llena un vacío que macOS deja abierto: no hay una forma integrada de desactivar Touch ID instantáneamente cuando es...

BridgeBlock

BridgeBlock BridgeBlock es una aplicación de barra de menú que previene ataques de puente inalámbrico detectando condiciones de puente y tomando medidas. También tiene una versión de línea de comandos para administradores de sistemas. Patrocinadores: Instalación...

ARC-Browser-Address-Bar-Spoofing-PoC

Suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS CVE-2024-25733 PoC de suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS Exploit PoC Prueba de concepto root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.rando...

CVE-2023-49471

CVE-2023-49471 Tipo de vulnerabilidad Blind SSRF Producto y versión afectados Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition...

CVE-2026-18113

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

EUVD-2026-78904

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

CVE-2026-18113

Concrete CMS 9.0 through 9.5.2 is affected by a stored cross-site scripting (XSS) vulnerability in the Top Navigation Bar block . The block failed to HTML-escape dropdown child page names before rendering them into the page, allowing a user with page-creation or renaming privileges to inject a sc...

CVE-2026-18113 Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

CVE-2026-43696

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization...

EUVD-2026-77901

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization...

CVE-2026-43696

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization...

CVE-2026-43696

CVE-2026-43696 is an authorization flaw in macOS where an app may be able to capture Touch Bar content without user authorization. The root cause is insufficient entitlement checks, addressed in the fix. The issue is resolved in macOS Golden Gate 27 , which is the recommended remediation. NVD ass...

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker could have placed a datalist element to obscure the address bar. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...

Astra Linux – Vulnerability in WebKit2GTK

A inconsistent user interface issue has been resolved through improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, and macOS Sonoma 14.1. Visiting a malicious website may result in address bar spoofing...

CVE-2024-25202

CVE-2024-25202 Se encontró una vulnerabilidad en PHPgurukul visitor management system 1.0. Ha sido clasificada como problemática. El problema afecta una funcionalidad desconocida de la barra de búsqueda que llama a search-result.php y search-visitor.php. La vulnerabilidad es Cross-Site-Scripting...

NoHomeBar

NoHomeBar iOS 14 - 16.1.2 Reboot your device to revert the changes. iOS14❌ Install TrollStore AltStore Credits https://github.com/zhuowei MacDirtyCow exploit https://twitter.com/straighttamago NoHomeBar...

axios-ssrf

Comenzar ejecuta pnpm install en los directorios raíz, backend y frontend ejecuta pnpm start:dev en el directorio raíz Vulnerabilidades Este sitio web está publicado en: https://axios-ssrf.onrender.com/ Server Side Request Forgery: Utilicé específicamente una versión de axios que es vulnerable a...

Xen: Improper Handling of HVM Emulation Return Codes (XSA-510)

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

CVE-2026-87486

A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...

CVE-2026-87567

A flaw was found in Google Chrome. This user interface UI misrepresentation in URL formatting allows a remote attacker to leverage social engineering techniques. By using a specially crafted domain name, the attacker can spoof the address bar, potentially deceiving users about the authenticity of...