6 matches found
npm: Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)
npm: Hono: csrf does not check requests sent by hyperlink auditing text/ping vulnerability discovered by ? in WordPress npm hono versions 4.13.16...
Hono: `csrf()` does not check requests sent by hyperlink auditing (`text/ping`)
Summary csrf validates a request only when its Content-Type is one of the three types an HTML form can send. Chromium's hyperlink auditing sends a cross-origin POST with the user's cookies and the content type text/ping, which is not in that list. The middleware does not look at Origin or...
CVE-2026-126355
The Hono web application framework is vulnerable to Cross-Site Request Forgery (CSRF) in versions prior to 4.13.16 because the csrf() middleware fails to validate text/ping requests generated by Chromium hyperlink auditing. Attackers can use actions in Chrome and Edge to send cross-origin creden...
ClearURLs - An Add-On Based On The New WebExtensions Technology And Will Automatically Remove Tracking Elements From URLs To Help Protect Your Privacy
ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browse through the Internet, which is regularly updated by us and can be...
A week in security (June 3 – 9)
Last week on Malwarebytes Labs, we rounded up some leaks and breaches, reported about Magecart skimmers found on Amazon CloudFront CDN, proudly announced we were awarded as Best Cybersecurity Vendor Blog at the annual EU Security Blogger Awards, discussed how Maine inches closer to shutting down...
Hyperlink auditing: where has my option to disable it gone?
There is a relatively old method that might be gaining traction to follow users around on the world wide web. Most Internet users are aware of the fact that they are being tracked in several ways. And awareness is a good start. In a state of awareness, you can adjust your behavior accordingly, an...