Malicious code in login.mail.ru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0636f08f714839bf59e63c612d7d9674f0057b4cf246726b4da2f57999c5ebac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Translation Bugs Open Edge Browser to Trivial UXSS Attacks

Microsoft patched two bugs in its Chromium-based Edge browser last week, one of which could be used by an attacker to bypass security and to remotely inject and execute arbitrary code on any website just by sending a message. That security-bypassing bug, CVE-2021-34506, is rated CVSS 5.4, or...

Mail.ru: [otus.p.mail.ru] Full Path Disclosure

Не факт, что вам удастся это исправить, так как проблема в стороннем ПО - "brat rapid annotation tool" Который доступен по ссылке otus.p.mail.ru/brat Стоит немного погулять по директориям и увидим раскрытие путей: Could not write statistics cache file to directory...