CVE-2024-13259: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Image Sizes allows Forceful Browsing.This issue affects Image Sizes: from 0.0.0 before 3.0.2...

CVE-2024-13280: Insufficient Session Expiration

Insufficient Session Expiration vulnerability in Drupal Persistent Login allows Forceful Browsing.This issue affects Persistent Login: from 0.0.0 before 1.8.0, from 2.0. before 2.2.2...

CVE-2024-13256: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

The vulnerability of Mozilla Firefox’s Private Browsing Mode and Thunderbird’s email client on Android operating systems allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox’s Private Browsing Mode and Thunderbird’s email client on Android operating systems is related to incorrect encoding during the generation of output data. Exploiting this vulnerability can allow remote attackers to enhance their privileges and gain unauthorize...

Apple iPadOS and iPhone OS Information Disclosure Vulnerability

iPadOS is Apple's mobile operating system for iPad devices, which is based on iOS and optimized for iPad. iPhone OS is Apple's operating system for iPhone and iPod touch. Apple iPadOS and iPhone OS suffer from an information disclosure vulnerability that originates from the possibility that a...

Apple iPhone OS and iPadOS Privacy Breach Vulnerability

iPhone OS is the operating system developed by Apple for the iPhone and iPod touch. iPadOS is Apple's mobile operating system for iPad devices, which is based on iOS and optimized for iPad. A privacy disclosure vulnerability exists in Apple iPhone OS and iPadOS, which stems from the fact that use...

PT-2025-42318

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 141.0.7390.107 Chromium versions prior to 141.0.7390.107 Description A use-after-free issue exists in the Safe Browsing component of Google Chrome and Chromium. This allows a remote attacker who has compromised...

Lumos 安全漏洞

Lumos is a tool by Andrew Nguonly personal developer. It is used for browsing web pages. A security vulnerability exists in Lumos versions prior to 1.0.17, which stems from the use of the markdown-to-jsx package without disableParsingRawHTML set to true, where ChatBar.tsx parses raw HTML from...

PT-2025-3051

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.2 macOS Sequoia versions prior to 15.2 watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to incorrect authorization in the State Management...

PT-2024-10080

Name of the Vulnerable Software and Affected Versions Open Social versions 11.8.0 through 12.3.10 Open Social versions 12.4.0 through 12.4.9 Description The issue is related to a lack of authorization in Drupal Open Social, which allows forceful browsing. This problem can be exploited by a remote...

Apple Safari 18.0 Multiple Vulnerabilities (121241)

The version of Apple Safari installed on the remote host is prior to 18.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 121241 advisory. - This issue was addressed through improved state management. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS...

Apple Safari 17.6 Multiple Vulnerabilities (120913)

The version of Apple Safari installed on the remote host is prior to 17.6. It is, therefore, affected by multiple vulnerabilities as referenced in the 120913 advisory. - A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safa...

Mozilla Firefox and Thunderbird Information Disclosure Vulnerability (CNVD-2025-00859)

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. Mozilla Firefox and Thunderbird suffer from an information disclosure vulnerability that is caused by insufficient clipboard protection in Android...

PT-2024-10085 · Drupal · Download All Files

Name of the Vulnerable Software and Affected Versions: Download All Files versions 0.0.0 through 2.0.1 Description: The issue is related to a Missing Authorization vulnerability in the Download All Files module for the Drupal CMS, which allows for Forceful Browsing. This vulnerability can be...

SUSE CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...

CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

UBUNTU-CVE-2024-11702

Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox 133 and Thunderbird 133...

CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click...