6621 matches found
Cross site scripting
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...
Design/Logic Flaw
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the...
CVE-2018-5115
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground page. Although the prompt contains the real domain making the request, this can result in user confusion about the originating site of the...
CVE-2018-5106
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these tools are open. This can allow style editor information used within Developer Tools to leak cross-origin. This vulnerability affects Firefox ...
Facebook Software Bug Made Some Private Posts Public: 14 Million Affected
A Facebook software bug in May switched the “suggested audience” for posts to “public” for 14 millions of users. The glitch meant Facebook users who though they were sharing content with just friends or small groups actually made their posts available to the general public. The incident is the...
Malicious Typo-Squatting
jquey is a maliciously typo-squatting package. During the installation of this package, the user’s private SSH key and bash history are set to a third party server...
Malicious Typo-Squatting
coffescript is a maliciously typo-squatting package. During the installation of these packages, the user’s private SSH key and bash history are set to a third party server...
Insecure Cookie Handling
drill-java-exec is vulnerable to insecure cookie handling attacks. The vulnerability exists due to the lack of httpOnly flag in the response cookies, allowing the cookies to be stolen by a third party website...
CVE-2017-16206
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16202
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16202
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16203
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
Information disclosure
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...