238 matches found
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu. Attack Vectors: Scripting A vulnerability in the...
PT-2026-83128
file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0301-1 Rating: important References: 1247981 Cross-References: CVE-2025-8879 CVE-2025-8880 CVE-2025-8881 CVE-2025-8882 CVE-2025-8901 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes 5...
Astra Linux – Vulnerability in Firefox and Thunderbird
When creating a callback via IPC to display the File Picker window, multiple identical callbacks might be created at once. Eventually, all of them would be destroyed as soon as one of the callbacks is completed. This could lead to a use-after-free condition, resulting in a potentially exploitable...
Astra Linux – Vulnerability in Firefox
A ambiguous file picker design could have confused users who intended to select and upload a single file, into uploading an entire directory. This issue was addressed by adding a new prompt. This vulnerability affects Firefox versions earlier than 85...
MiracleLinux 7 : firefox-102.15.0-1.0.1.el7.AXS7 (AXSA:2023-6392:33)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6392:33 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla:...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of the File Picker in Google Chrome prior to version 139.0.7258.127 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
EUVD-2019-2081
Malware in sbrugna...
EUVD-2017-14518
Malware in sbrugna...
EUVD-2021-26161
Malware in sbrugna...
EUVD-2020-5901
Malware in sbrugna...
EUVD-2021-10877
Malware in sbrugna...
EUVD-2015-1462
Malware in sbrugna...
EUVD-2020-15491
Malware in sbrugna...
EUVD-2021-24956
Malware in sbrugna...
EUVD-2018-17858
Malware in sbrugna...
EUVD-2022-3156
Malicious code in bioql PyPI...
EUVD-2023-47777
Malicious code in bioql PyPI...