10 matches found
PYSEC-2026-300 Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Summary During a manual source code review, ARIMLABS.AI researchers identified that the browseruse module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can...
PT-2026-53395
Summary During a manual source code review, ARIMLABS.AI researchers identified that the browser use module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures ca...
CVE-2026-41983
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41983: Undefined Security Weakness
Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-25740
Summary : CVE-2026-25740 describes a local privilege escalation in NixOS where enabling the captive-browser module (programs.captive-browser) allows any user to run arbitrary commands with the CAP_NET_RAW capability in 25.05 and earlier. The underlying issue enables binding to privileged ports an...
EUVD-2023-2419
Malicious code in bioql PyPI...
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Summary During a manual source code review, ARIMLABS.AI researchers identified that the browseruse module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can...
Binary Vulnerability in Foxit Reader U3D Plugin
Foxit Software Incorporated Foxit Software is a provider of product technology and solutions that cover the document lifecycle, including document generation, conversion, display, editing, searching, printing, storage, signing, forms, protection, and secure distribution management. Binary...
Python 'Lib/webbrowser.py' Remote Command Execution Vulnerability
Python is an object-oriented, straightforward computer programming language. A remote command execution vulnerability exists in Python 'Lib/webbrowser.py', which allows remote attackers to exploit the vulnerability to construct malicious URIs and inject arbitrary code...