The vulnerability of Google Chrome’s permission prompts, which allows a violator to access confidential information

The vulnerability of Google Chrome’s permission prompts is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information through a specially created HTML page...

The vulnerability of the App Launcher browser startup method in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the App Launcher browser control in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

The vulnerability of the Fullscreen application interface of Google Chrome’s browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Fullscreen application interface of Google Chrome’s browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions on the browser page through a specially...

The vulnerability of the WebShare component of the Google Chrome browser for Android allows a hacker to manipulate the URL bar content.

The vulnerability of the WebShare component of the Google Chrome browser for Android is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to manipulate the URL input using a specially created HTML page...

The vulnerability of Google Chrome’s Autofill function for Android allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome’s Autofill function for Android relates to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

Arbitrary Code Execution

pandasai is vulnerable to Arbitrary Code Execution. The vulnerability exists in cleancode function at init.py due to lack of security checks which allows an attacker to inject and execute malicious code, resulting in prompt injection...

Fedora 37 : java-1.8.0-openjdk (2023-a2922bf669)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a2922bf669 advisory. respin of security cpu due to uninstallable sources subpkg ---- updatet to july security update 382.b05 Tenable has extracted the preceding description block...

Trace HTML Requests with Application Firewall Security Violation Logs on NetScaler Appliance

The NetScaler offers the option to isolate traffic for a specific Application Firewall profile and collect nstrace for HTML requests that trigger a log, block action or have malformed requests. The nstrace collected in "–appfw" mode will have details of the entire request including the Applicatio...

The vulnerability of the Extensions component of the Google Chrome browser, which allows a hacker to perform cross-site scripting attacks

The vulnerability of the Google Chrome browser’s Extensions component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by loading a specially crafted extension...

The vulnerability of the application programming interface of Google Chrome’s File System allows a hacker to circumvent existing security restrictions.

The vulnerability of the Google Chrome browser’s application programming interface for the File System is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to circumvent existing security restrictions...

Ubuntu: Security Advisory (USN-6252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2640

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks...

CVE-2023-2640

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks...

Security feature bypass

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks...

CVE-2023-2640

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks...

Ubuntu 23.04 : Linux kernel vulnerabilities (USN-6250-1)

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6250-1 advisory. Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks i...

The vulnerability of the Google Chrome browser downloader, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Google Chrome browser browser loader is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

Google Nest 授权问题漏洞

Google Nest is a smart home product by Google, an American company. Google Nest has a security vulnerability. The vulnerability allows unauthenticated nodes to forge radio frames using "Key ID Mode 2", a special mode that uses a static encryption key to bypass security checks, allowing arbitrary ...

The vulnerability of Google Chrome’s Autofill function allows attackers to gain access to confidential information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information...

The vulnerability of the WebApp Installs component of Google Chrome allows a perpetrator to access confidential information.

The vulnerability of Google Chrome browser’s WebApp installations is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information...