Lucene search
+L

913 matches found

OSV
OSV
•added 2019/04/26 5:29 p.m.•11 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS7.5AI score0.01832EPSS
SaveExploits0References2
NVD
NVD
•added 2019/04/26 5:29 p.m.•22 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS9AI score0.01832EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/04/26 5:29 p.m.•34 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS7.2AI score0.01832EPSS
SaveExploits0References2
Prion
Prion
•added 2019/04/26 5:29 p.m.•19 views

Command injection

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

7.5CVSS8.9AI score0.01832EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2019/04/26 4:13 p.m.•137 views

CVE-2019-9804

CVE-2019-9804 is a macOS-specific issue in Firefox Developer Tools where pasting the output of the ‘Copy as cURL’ command could cause the execution of unintended additional bash commands if the URL was maliciously crafted. The root cause is tied to how the native Bash on macOS handles the pasted ...

9.8CVSS8.8AI score0.01832EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2019/04/26 4:13 p.m.•57 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS9.5AI score0.01832EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/04/26 4:13 p.m.•44 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9AI score0.01832EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/04/26 12:00 a.m.•46 views

Google Chrome Developer Tools Incorrect Escape Vulnerability

Google Chrome is a web browser from Google, and Developer Tools is one of the developer tools components. A security vulnerability exists in Developer Tools in Google Chrome versions prior to 74.0.3729.108. The vulnerability can be exploited by an attacker to bypass security restrictions and gain...

7.8CVSS8.6AI score0.0039EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/26 12:00 a.m.•3 views

CVE-2019-9804: Improper Neutralization of Special Elements used in an OS Command

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS6AI score0.01832EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2019/04/23 12:00 a.m.•93 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 74 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 74.0.3729.108 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

8.8CVSS8.9AI score0.01851EPSS
SaveExploits2Affected Software1
Kaspersky
Kaspersky
•added 2019/04/09 12:00 a.m.•58 views

KLA11459 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS...

7.5CVSS7.8AI score0.06972EPSS
SaveExploits0References14
Kitploit
Kitploit
•added 2019/04/01 11:45 a.m.•265 views

Commando VM - The First of Its Kind Windows Offensive Distribution

Welcome to CommandoVM - a fully customized, Windows-based security distribution for penetration testing and red teaming. Installation Install Script Requirements Windows 7 Service Pack 1 or Windows 10 60 GB Hard Drive 2 GB RAM Instructions 1. Create and configure a new Windows Virtual Machine...

8.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/04/01 12:00 a.m.•3 views

PT-2019-19874

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 66 Description The issue arises when the result of the 'Copy as cURL' command in Firefox Developer Tools is pasted into a command shell on macOS, potentially leading to the execution of unintended additional bash scri...

9.8CVSS0.01832EPSS
SaveExploits0
CNVD
CNVD
•added 2019/03/22 12:00 a.m.•20 views

Mozilla Firefox Firefox Developer Tools Code Execution Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation.Firefox Developer Tools is one of the developer tools component. A security vulnerability exists in Firefox Developer Tools in versions of Mozilla Firefox prior to 66 on the macOS platform. The vulnerability can be exploite...

9.8CVSS8.8AI score0.01832EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2019/03/12 12:00 a.m.•60 views

KLA11433 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in NuGet Package Manager can be exploited remotely to spoo...

7.8CVSS7.5AI score0.10551EPSS
SaveExploits0References6
Debian
Debian
•added 2019/02/19 2:54 a.m.•302 views

[SECURITY] [DSA 4395-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4395-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 18, 2019 https://www.debian.org/security/faq -...

9.6CVSS9.1AI score0.12777EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2019/02/19 12:00 a.m.•67 views

Debian DSA-4395-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-17481 A use-after-free issue was discovered in the pdfium library. - CVE-2019-5754 Klzgrad discovered an error in the QUIC networking implementation. - CVE-2019-5755 Jay Bosamiya discovered an implementation erro...

9.6CVSS7.4AI score0.12777EPSS
SaveExploits2References63
Kaspersky
Kaspersky
•added 2019/02/12 12:00 a.m.•202 views

KLA11419 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A...

9.8CVSS7.9AI score0.27705EPSS
SaveExploits0References32
NVD
NVD
•added 2019/01/09 7:29 p.m.•27 views

CVE-2018-6111

An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page...

8.8CVSS8.3AI score0.0258EPSS
SaveExploits0References6
OSV
OSV
•added 2019/01/09 7:29 p.m.•7 views

CVE-2018-6111

An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page...

8.8CVSS7.6AI score0.0258EPSS
SaveExploits0References6
Rows per page
Query Builder