ClipGuard

ClipGuard Windows 上での ClickFix クリップボードインジェクション攻撃のリアルタイム検出。 ClipGuard はクリップボードのアクティビティを監視し、不審なペースト操作が実行される前にインターセプトします。特に ClickFix 手法（偽の確認ページでユーザーを騙し、悪意あるコマンドを貼り付けさせる攻撃）を標的としています。 問題 ClickFix 攻撃は次のように動作します。 1. 被害者が偽の CAPTCHA や確認プロンプトを表示するページにアクセスする 2. JavaScript が悪意のあるコマンド（通常は...

CVE-2026-50642 Terminal Escape Injection in diff‑so‑fancy

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return \r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attack...

PT-2026-65776

diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing other control characters, including carriage return r and escape sequences e.g., OSC, CSI, to pass through unsanitized. An attacke...

EUVD-2023-36921

Malicious code in bioql PyPI...

CVE-2025-1692 MongoDB Shell may be susceptible to control character injection via pasting

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue...

Clipboard Injection

Firefox is vulnerable to Clipboard Injection. The vulnerability exists when using X11, where text selected by the page using the Selection API is erroneously copied into the primary selection, a temporary storage similar to the clipboard...

PT-2023-23960 · Kanboard · Kanboard

Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.29 Description: The issue arises from improper handling of elements under the contentEditable element, allowing maliciously crafted clipboard content to inject arbitrary HTML tags into the DOM. A low-privileged...

ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability

ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-083 February 15, 2011 -- CVE ID: CVE-2010-4465 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Java Runtime --...