91 matches found
Google Chrome Cross-Site Scripting Vulnerability (CNVD-2025-18922)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a cross-site scripting vulnerability that stems from an improperly implemented extension. An attacker can exploit the vulnerability to disclose cross-domain data using a constructed HTML page...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a cross-site scripting vulnerability that stems from an improperly implemented extension. An attacker can exploit the vulnerability to disclose cross-domain data using a constructed HTML page...
TechniqueRAG: Retrieval Augmented Generation for Adversarial Technique Annotation in Cyber Threat Intelligence Text
Accurately identifying adversarial techniques in security texts is critical for effective cyber defense. However, existing methods face a fundamental trade-off: they either rely on generic models with limited domain precision or require resource-intensive pipelines that depend on large labeled...
CVE-2025-30132
An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device...
Apple macOS 信息泄露漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS, which stems from state management improvements, and could lead to a cross-domain disclosure of data from malicious websites...
PT-2026-4947
Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.5 Description xrdp contains an unauthenticated stack-based buffer overflow. The issue occurs during the pre-authentication Secure Settings Exchange via Client Info PDU T1210 due to improper bounds checking in the xr...
Hybrid Analysis Utilizes Criminal IP’s Robust Domain Data for Better Malware Detection
Torrance, United States / California, 7th October 2024, CyberNewsWire...
USN-6703-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-2609, CVE-2024-2611,...
CVE-2023-43041
IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808...
CVE-2022-34352
IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...
IBM QRadar SIEM 信息泄露漏洞
IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...
Google Chrome Autofill component code issue vulnerability
Google Chrome is a web browser from Google, Inc. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Autofill component. A remote attacker could exploit the vulnerability to disclose cross-domain data via...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, Inc. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Autofill component. A remote attacker could exploit the vulnerability to disclose cross-domain data via...
IBM QRadar SIEM 信息泄露漏洞
IBM QRadar SIEM is a solution from IBM that leverages security intelligence to protect assets and information from advanced threats. IBM QRadar SIEM versions 7.4 and 7.5 contain an information disclosure vulnerability that originates when a non-tenant user assigned a domain-specific security...
PT-2023-13364 · Ibm · Ibm Qradar Siem
Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.4 through 7.5 Description: The issue allows a non-tenant user with a specific domain security profile assigned to see some data from other domains, resulting in information exposure. Recommendations: For IBM QRadar...
SUSE CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
Google Chrome Information Disclosure Vulnerability (CNVD-2022-45558)
Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to an information disclosure vulnerability that could be exploited to disclose cross-domain data via crafted HTML pages...
Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45570)
Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to compromise cross-domain data via crafted HTML pages...
USN-5229-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, obtain sensitive information across domains, or execu...
