PT-2026-83838

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected...

EUVD-2026-53364

Zigbee2MQTT's ExternalJSExtension.getFilePath lib/extension/externalJS.ts joins a name parameter received via an MQTT message topic zigbee2mqtt/bridge/request/extension/save into the extensions base path using path.joinbasePath, name with no sanitization. Because path.join resolves ../ sequences,...

CVE-2026-64791

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

SUSE-SU-2023:0030-1 Security update for tcl

This update for tcl fixes the following issues: - Fixed a race condition in test socket-13.1. - Removed the SQLite extension and use the packaged sqlite3 instead bsc1195773...

PT-2023-36105 · Tcl · Tcl

Name of the Vulnerable Software and Affected Versions: tcl affected versions not specified Description: The issue involves a race condition in test socket-13.1. Additionally, the SQLite extension has been removed, and the packaged sqlite3 is used instead. Recommendations: At the moment, there is ...

SUSE-SU-2022:3653-1 Security update for tcl

This update for tcl fixes the following issues: - Fixed a race condition in test socket-13.1. - Removed the SQLite extension and use the packaged sqlite3 instead bsc1195773...

CVE-2019-15684

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions...

CVE-2019-15684

The CVE concerns the Kaspersky Protection Chrome extension (Google Chrome) prior to version 30.112.62.0. The vulnerability allows remote unauthorized access to the extension’s uninstall functionality, potentially removing other installed extensions. The attacker can trigger uninstall prompts via ...

CVE-2019-15684: Undefined Security Weakness

Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions...

SUSE-RU-2019:0823-1 Optional update for php72

This update provides PHP 7.2 and subpackages to the SUSE Linux Enterprise 12 Web and Scripting Module. It is a replacement of the php7 packages, the packages do not co-exist. The mcrypt extensions was removed in PHP 7.2...

We block shady ad blockers

Some of you have reached out to us concerning Malwarebytes blocking of certain ad blocking extensions, or an influx in web blocking notifications. First things first, this is not a false positive. Recently in their blog, AdGuard has discovered that numerous malicious ad blocking extensions were...

PT-2019-4141

Name of the Vulnerable Software and Affected Versions Kaspersky Protection extension for Google Chrome versions prior to 30.112.62.0 Description The issue is related to improper authorization in the Kaspersky Protection extension for Google Chrome, allowing unauthorized access to its features. Th...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: "FrontEnd MP3 Player" femp3player, "Search In Tables" fesearchintable, "Content Search" gstcontentsearch, "Multilingual Alias" multilingualalias, "Myth Repository" mythrepository and "References database"...

[SECURITY] New version of gnupg installed

Package: gnupg Debian-specific: no The version of gnupg that was distributed in Debian GNU/Linux 2.2 had a logic error in the code that checks for valid signatures which could cause false positive results: Jim Small discovered that if the input contained multiple signed sections the exit-code gnu...