4 matches found
FreeBSD : Firefox -- content injection attack (a3291f81-3d7c-11f0-9a55-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a3291f81-3d7c-11f0-9a55-b42e991fc52e advisory. [email protected] reports: Previewing a response in Devtools ignored CSP headers, which could have...
MAL-2025-3778 Malicious code in firefox-devtools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in firefox-devtools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2018-5175
A mechanism to bypass Content Security Policy CSP protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the "require.js" library that is part of Firefox's Developer Tools, a...