EUVD-2011-1810

Malware in sbrugna...

EUVD-2023-41995

Malicious code in bioql PyPI...

EUVD-2021-30158

Malicious code in bioql PyPI...

Fedora 42 : chromium (2025-fd5fc5fb75)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-fd5fc5fb75 advisory. Update to 140.0.7339.80 CVE-2025-9864: Use after free in V8 CVE-2025-9865: Inappropriate implementation in Toolbar CVE-2025-9866: Inappropriate...

The vulnerability of the Extensions component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Extensions component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows attackers to enhance their privileges.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to enhance their privileges.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

Chromium: CVE-2025-0446 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of Google Chrome’s web browser extensions, which allows a perpetrator to compromise data integrity

The vulnerability of Google Chrome’s web browser extensions is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

Medium: amazon-ecr-credential-helper

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that stems from a data validation deficiency in Extensions. An attacker can exploit this vulnerability to execute arbitrary code on a system or cause an application to crash...

Mozilla: Extensions could have opened external schemes without user knowledge

The Mozilla Foundation Security Advisory describes this flaw as: Permission prompts for opening external schemes were only shown for ContentPrincipals resulting in extensions being able to open them without user interaction via ExpandedPrincipals. This could lead to further malicious actions such...

Vulnerability of browser extensions in Google Chrome and Microsoft Edge, allowing attackers to gain unauthorized access to protected information

The vulnerability of Google Chrome and Microsoft Edge browser extensions is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by downloading a specially created extension...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that exists due to a post-release use error in Google Chrome extensions. A remote attacker could trick a victim into visiting a...

CVE-2022-24456

HEVC Video Extensions Remote Code Execution Vulnerability...

Microsoft HEIF Image Extensions 缓冲区错误漏洞

Microsoft HEIF Image Extensions is a feature library for Microsoft Windows systems from Microsoft Corporation USA.Microsoft HEIF Image Extensions is vulnerable to remote code execution, which can be exploited by attackers to execute arbitrary code on the system...

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the implementation of Mozilla Firefox browser extensions allows a perpetrator to circumvent established security restrictions.

The vulnerability of Mozilla Firefox browser extensions is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by bypassing the permission request window during the installation of extensions...

The vulnerability of the HEVC Video Extensions application, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extensions application is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HEVC Video Extensions application, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extensions application is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...