Arbitrary Code Injection

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Arbitrary Code Injection via modification of the resources folder when the embeddedAsarIntegrityValidation...

Google Chrome Policy Data Compromise

The vulnerability of Google Chrome’s browser loading policy is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially created HTML page...

Google Chrome Policy Data Compromise

The vulnerability of Google Chrome browsers is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

Windows Bypass Secure Downloads

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms for safe loading by using a specific loading policy...