5 matches found
EUVD-2018-0130
Malware in sbrugna...
EUVD-2021-0220
Malware in sbrugna...
EUVD-2018-0129
Malware in sbrugna...
PT-2021-23126 · Unknown +1 · Qutebrowser +1
Name of the Vulnerable Software and Affected Versions: qutebrowser versions 1.7.0 through 2.3.x Description: The issue allows arbitrary code execution via commands such as :spawn or :debug-pyeval when a specially crafted qutebrowserurl: URL is opened with certain applications. Only Windows instal...
CVE-2018-10895
qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, resulting in arbitrary code execution...