CVE-2024-5500

Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome version 1.3.36.351 and prior versions, which stems from a mal-implementation issue found in the Sign-In module. An attacker could exploit the vulnerability to bypass security...

PT-2024-27771

Name of the Vulnerable Software and Affected Versions Outline versions 0.76.1 and earlier Description The issue allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link. Recommendations For Outline versions 0.76.1 and earlier, update to a versi...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-37829: Session Fixation

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

CVE-2024-30264 typebot.io: `GHSL-2024-040`

Typebot is an open-source chatbot builder. A reflected cross-site scripting XSS in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the redirectPath parameter from the URL. If a user clicks on a link where the...

CVE-2024-30264

Typebot is an open-source chatbot builder. A reflected cross-site scripting XSS in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the "redirectPath" parameter from the URL. If a user clicks on a link where the...

CVE-2024-30264

Typebot is affected by a reflected XSS in the sign-in page, exploitable via the redirectPath URL parameter if it uses a javascript scheme. This can allow an attacker to execute arbitrary JavaScript with the user’s privileges, potentially hijacking accounts. The issue affects Typebot versions prio...

CVE-2024-30264: Improper Neutralization of Input During Web Page Generation

Typebot is an open-source chatbot builder. A reflected cross-site scripting XSS in the sign-in page of typebot.io prior to version 2.24.0 may allow an attacker to hijack a user's account. The sign-in page takes the redirectPath parameter from the URL. If a user clicks on a link where the...

PT-2024-23307

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 2.24.0 Description A reflected cross-site scripting XSS issue in the sign-in page of typebot.io may allow an attacker to hijack a user's account. The sign-in page takes the redirectPath parameter from the URL. If a us...

March 26, 2024—KB5035942 (OS Builds 22621.3374 and 22631.3374) Preview

None None...

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

Devolutions Server Security Vulnerability

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2023.3.14.0 and prior versions, which originates from PAM password rotation during the sign-in...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-5233 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 1.3.36.351 Description: The issue is related to an inappropriate implementation in the Sign-In component of Google Chrome, allowing a remote attacker to bypass navigation restrictions. This can be achieved via ...

Can't sign in to workspaces with SAML using custom domains

Can't sign in to workspaces with SAML using custom domains, When try to access the custom domain URL get the error "Unable to Process Your Request, There was an unexpected error"...

CVE-2023-49173

CVE-2023-49173 affects the 10to8 Online Appointment Booking System WordPress plugin (Sign In Scheduling Online Appointment Booking System). It is a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, leading to Stored XSS in versions up to ...

CVE-2023-49173: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10to8 Sign In Scheduling Online Appointment Booking System allows Stored XSS.This issue affects Sign In Scheduling Online Appointment Booking System: from n/a through 1.0.9...