3073 matches found
Skype, Slack and Other Popular Windows Apps Vulnerable to Critical Framework Bug
UPDATE Hundreds of software applications built using the developer framework called Electron may be vulnerable to a remote code execution flaw, according to developers of the framework. Impacted are dozens of popular Windows applications such as Microsoft’s Skype for Windows and Slack. Earlier th...
Critical Flaw Hits Popular Windows Apps Built With Electron JS Framework
A critical remote code execution vulnerability has been reported in Electron—a popular web application framework that powers thousands of widely-used desktop applications including Skype, Signal, Wordpress and Slack—that allows for remote code execution. Electron is an open-source framework that ...
CVE-2018-1000006: Improper Neutralization of Special Elements used in an OS Command
GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user click...
Remote Code Execution
Overview Affected versions of electron may be susceptible to a remote code execution flaw when certain conditions are met: 1. The electron application is running on Windows. 2. The electron application registers as the default handler for a protocol, such as nodeapp://. This vulnerability is caus...
electron-prebuilt-compile (1.8.1) potentially affected by CVE-2018-1000006 via electron (1.8.1)
electron NPM version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - electron-prebuilt-compile 1.8.1 Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...
@ftnk/electron-prebuilt-compile (1.7.3), @theia/application-package (>=0.2.0-next.0148a1fd, <=0.4.0-next.f7dccfd2) +56 more potentially affected by CVE-2018-1000006 via electron (>=1.7.0, <=1.7.10)
electron NPM version =1.7.0, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.1, =0.2.0-next.29255833, =0.2.0-next.0148a1fd, =0.2.0-next.29255833, =0.2.0-next.29255833, =0.4.0-next.0317f991,...
@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.5, <=1.0.6), @infosupport/kc-cli (>=2.1.1, <=2.3.8) +25 more potentially affected by CVE-2018-1000006 via electron (>=1.6.0, <=1.6.15)
electron NPM version =1.6.0, =1.0.5, =2.1.1, =1.0.0, =4.1.0, =0.6.0, =0.0.2, =0.0.2, =1.1.3, =1.3.0, =1.6.0, =1.8.0 - electron-prebuilt-compile-jest 1.6.1 and more Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...
GHSA-W222-53C6-C86P Remote Code Execution in electron
Affected versions of electron may be susceptible to a remote code execution flaw when certain conditions are met: 1. The electron application is running on Windows. 2. The electron application registers as the default handler for a protocol, such as nodeapp://. This vulnerability is caused by a...
Remote Code Execution in electron
Affected versions of electron may be susceptible to a remote code execution flaw when certain conditions are met: 1. The electron application is running on Windows. 2. The electron application registers as the default handler for a protocol, such as nodeapp://. This vulnerability is caused by a...
Fedora 27 : electron-cash (2018-9e37c33e3f)
Yet another security issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 27 : electron-cash (2018-f0ee5b818d)
Updated to version 3.1.1 Fixes https://bitcointalk.org/index.php?topic=2702103.0 ---- Updated to version 3.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it ...
Fedora Update for electron-cash FEDORA-2018-9e37c33e3f
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 27 Update: electron-cash-3.1.2-1.fc27
Electron Cash is an easy to use Bitcoin Cash client. It protects you from l osing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it...
[SECURITY] Fedora 27 Update: electron-cash-3.1.1-1.fc27
Electron Cash is an easy to use Bitcoin Cash client. It protects you from l osing coins in a backup mistake or computer failure, because your wallet can be recovered from a secret phrase that you can write on paper or learn by heart. There is no waiting time when you start the client, because it...
Fedora Update for electron-cash FEDORA-2018-f0ee5b818d
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Github Electron URL Spoofing Vulnerability
GitHub Electron is an application development framework from the American company GitHub. The framework supports writing cross-platform desktop applications using JavaScript, HTML and CSS. A security vulnerability exists in Github Electron versions 1.6.4 through 1.6.11 and 1.7.0 through 1.7.5. An...
Command injection
Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...
CVE-2017-1000424
Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...
