New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security

Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called Quarantined Domains. "We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including securi...

Cross-site Scripting (XSS)

posthog-js is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library does not properly sanitize the apiURL attribute in the toolbar.ts, which allows an attacker to inject and execute malicious JavaScript...

CVE-2023-1926

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion vi...

PT-2023-17346 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is due to missing or incorrect nonce validation on the deleteCacheToolbar function, making it possible for unauthenticated attackers to perform...

PT-2023-17347 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This allows...

CWA for Chrome OS 23.3.0.40 - keyboard is unresponsive inside the Citrix session

Symptom 1: The keyboard is non-responsive when running in Kiosk mode though it is responsive at the Citrix login in kiosk mode users can enter their username and password but becomes non-responsive inside the Citrix session. Symptom 2: 1. Launch CWA for Chrome OS desktop session 2. Go to the full...

How to Hide HTML5 Workspace App Toolbar Download Option?

Hide 'Download' option in HTML5 Workspace App toolbar...

SUSE CVE-2012-5837

The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting XSS attacks via a crafted string...

SUSE CVE-2014-1561

Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons via crafted JavaScript code that is encountered during 1 page, 2 panel, or 3 toolbar customization...

SUSE CVE-2016-9902

The Pocket toolbar button, once activated, listens for events fired from it's own pages but does not verify the origin of incoming events. This allows content from other origins to fire events and inject content and commands into the Pocket context. Note: this issue does not affect users with e10...

SUSE CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

SUSE CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...

Devices tab was missing from toolbar when launching desktop

Devices tab missing when launching desktop...

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...

CVE-2022-2163

CVE-2022-2163 affects Google Chrome (Cast UI and Toolbar) and was triggered by a use-after-free leading to potential heap corruption when a user is convinced to install a malicious extension. Affected software: Google Chrome prior to 103.0.5060.134; impact described as high risk with possible arb...

CVE-2022-2163

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction...

Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5209 Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...