275 matches found
CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension
CMSmadesimple Stored XSS v2.2.18 Auteur : Sergio Description : Une vulnérabilité de script intersite Cross Site Scripting dans CMSmadesimple v.2.2.18 permet à un attaquant local d'exécuter du code arbitraire via un script conçu dans le répertoire supérieur Top Directory du menu File Picker...
Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2021_4130)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214130 advisory. Mozilla: Use-after-free in HTTP2 Session object Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3 Mozilla: iframe sandbox rules did not...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of the File Picker in Google Chrome prior to version 139.0.7258.127 allowed a remote attacker who convinced a user to perform certain UI gestures to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Firefox
A ambiguous file picker design could have confused users who intended to select and upload a single file, into uploading an entire directory. This issue was addressed by adding a new prompt. This vulnerability affects Firefox versions earlier than 85...
Astra Linux – Vulnerability in Firefox, Thunderbird
When creating a callback via IPC to display the File Picker window, multiple identical callbacks might be created at once. Eventually, all of them would be destroyed as soon as one of the callbacks is completed. This could lead to a use-after-free condition, resulting in a potentially exploitable...
PT-2026-83128
file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0301-1 Rating: important References: 1247981 Cross-References: CVE-2025-8879 CVE-2025-8880 CVE-2025-8881 CVE-2025-8882 CVE-2025-8901 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes 5...
MiracleLinux 7 : firefox-102.15.0-1.0.1.el7.AXS7 (AXSA:2023-6392:33)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6392:33 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla:...
EUVD-2017-14518
Malware in sbrugna...
EUVD-2020-15491
Malware in sbrugna...
EUVD-2020-5901
Malware in sbrugna...
EUVD-2021-24956
Malware in sbrugna...
EUVD-2018-17858
Malware in sbrugna...
EUVD-2015-1462
Malware in sbrugna...
EUVD-2019-2081
Malware in sbrugna...
EUVD-2021-10877
Malware in sbrugna...
EUVD-2021-26161
Malware in sbrugna...
EUVD-2022-4603
Malicious code in bioql PyPI...