Google Chrome Extensions Security Bypass Vulnerability (CNVD-2019-17514)

Google Chrome is the United States Google Google company's a Web browser. Extensions is one of the open source PDF rendering engine. A security vulnerability exists in Extensions in versions prior to Google Chrome 75.0.3770.80. An attacker can exploit this vulnerability to bypass security...

Hyperlink auditing: where has my option to disable it gone?

There is a relatively old method that might be gaining traction to follow users around on the world wide web. Most Internet users are aware of the fact that they are being tracked in several ways. And awareness is a good start. In a state of awareness, you can adjust your behavior accordingly, an...

CVE-2019-8385

An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and local file inclusion vulnerability in the ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe allows a remote attacker to list or enumerate sensitive contents of files...

CVE-2019-8385

Thomson Reuters Desktop Extensions 1.9.0.358 contains an unauthenticated directory traversal and local file inclusion vulnerability (CVE-2019-8385) in ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe. An attacker can use a \.. path to port 6677 to enumerate sensitive files on the...

GHSA-5V72-XG48-5RPM Denial of Service in ws

Affected versions of ws can crash when a specially crafted Sec-WebSocket-Extensions header containing Object.prototype property names as extension or parameter names is sent. Proof of concept const WebSocket = require'ws'; const net = require'net'; const wss = new WebSocket.Server port: 3000 ,...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 75 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 75.0.3770.80 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Google Is Finally Making Chrome Extensions More Secure

Third-party developers don't always build extensions with security best practices in mind. Now Google is taking steps to better protect user data...

PT-2022-9181 · Gnome +1 · Gnome Shell +1

Name of the Vulnerable Software and Affected Versions: gnome-shell versions affected versions not specified Description: A locking protection bypass flaw was found in gnome-shell, allowing a physical attacker with access to a locked system to kill existing applications and start new ones as the...

Apple macOS kextutil Race Condition Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of kernel...

UBUNTU-CVE-2019-5796

Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2019-5793

Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...

CVE-2019-5793

Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...

DEBIAN-CVE-2019-5796

Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Hardcoded credentials

Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...

DEBIAN-CVE-2019-5793

Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page...

Buffer overflow

wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of the packet: record length, client hello length,...

Google Chrome Competitive Conditions Vulnerability (CNVD-2019-16267)

Google Chrome is a web browser from Google, an American company. A competitive condition vulnerability exists in Extensions in versions prior to Google Chrome 73.0.3683.75, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service by tricking a...

WordPress Chrome-Extensions 1.0 Open Redirection

Exploit Title : WordPress Chrome-Extensions Themes 1.0 Open Redirection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 23/05/2019 Vendor Homepage : chrome-extensions.org - cssjockey.com Information Link : themesinfo.com/chrome-extensions-wordpress-theme-wwpx...

Mozilla Firefox has an unspecified vulnerability (CNVD-2019-17484)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 67. An attacker can exploit the vulnerability to spoof pages and trick users into installing malicious extensions...

[SECURITY] Fedora 30 Update: rubygem-activesupport-5.2.3-1.fc30

A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing...