4197 matches found
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12, <=0.1.20) +26830 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=5.0.0.release, <=5.2.21.release)
org.springframework:spring-beans MAVEN version =5.0.0.release, =4.4.0.0, =0.1.12, =0.2, =0.2, =0.2, =0.2, =0.2, =0.2, =0.5, =0.0.12, =0.0.12, =0.1.2, =0.0.22, =0.0.22, =0.0.51 and more Source cves: CVE-2022-22970 Source advisory: OSV:GHSA-HH26-6XWR-GGV7...
TikTok: disclosure the live_analytics information of any livestream.
A possible disclosure of the liveanalytics information for any livestream was found by accessing the roomid parameter via devtools. We thank @datph4m for reporting this to our team...
Web Development Tools Information Disclosure
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Web Development Tools Information Disclosure
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
PT-2022-2404
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the DevTools of Google Chrome and Microsoft Edge browsers. This vulnerability ca...
CVE-2022-28283
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox 99...
UBUNTU-CVE-2022-28283
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox 99...
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5370-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5370-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could...
PT-2022-3820
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 99 Description The sourceMapURL feature in devtools was missing security checks, allowing a webpage to attempt to include local files or other files that should have been inaccessible. This issue is related to errors ...
Heap Buffer Overflow
chromium is vulnerable to use after free.The vulnerability exist in WebUI, allowing a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools...
DevTools Set XSS
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to escape from an isolated programming environment using a speciall...
CVE-2022-24072
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...
Open redirect
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...
CVE-2022-24072
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...
CVE-2022-24072
The CVE-2022-24072 entry applies to Naver Whale Browser, with affected versions before 3.12.129.18. The root cause is improper data handling in the devtools API (devtools.inspectedWindow), allowing potentially attacker-controlled JavaScript execution within the extension store web page. Consequen...
CVE-2022-24072: Improper Privilege Management
The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users open the developer tool...
PT-2022-16451
Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 3.12.129.18 Description The issue concerns the devtools API in the Whale browser, which allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow...
Naver Whale Browser security vulnerability
A cross-site scripting vulnerability exists in versions prior to 3.12.129.18 of Naver Whale Browser, a web browser from Naver Korea that supports user-defined interfaces, due to a lack of data validation filtering of user-supplied and output data. An attacker could exploit this to allow extension...
DevTools Code Execution
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
GitLab: Stored XSS in Notes (with CSP bypass for gitlab.com)
Summary I read the issue 345657 which handles the XSS in notes reported in Hackerone report 1398305. This issue fixes the reported XSS but leaves the HTML injection that was also mentioned. I don't know how you deal with these situations, but I thought I report this, and you can decide : The issu...