CVE-2024-54207

creationtimestamp| type| source ---|---|--- 2024-12-06 15:05:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113606494323979888 2024-12-06 16:27:26+00:00| seen| https://t.me/cvedetector/12218...

CVE-2024-51815

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066022271275 2024-12-06 13:20:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080923087323...

CVE-2024-52335

creationtimestamp| type| source ---|---|--- 2024-12-06 13:16:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113606066036348865 2024-12-06 13:20:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113606080937405119 2024-12-06 20:06:36+00:00| published-proof-of-concept|...

CVE-2024-11352

creationtimestamp| type| source ---|---|--- 2024-12-06 09:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113605081727215425 2024-12-06 10:36:09+00:00| seen| https://t.me/cvedetector/12191...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems, Inc.QNAP Systems QTS is an entry-level operating system.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that stems...

QNAP Systems Qsync Central 后置链接漏洞

QNAP Systems Qsync Central is a cloud-based file synchronization service on a NAS from China Weilian Technology QNAP Systems. A backlink vulnerability exists in QNAP Systems Qsync Central version 4.4.0.1620240819 and prior versions, which stems from the inclusion of a link tracking vulnerability...

CVE-2024-12235

creationtimestamp| type| source ---|---|--- 2024-12-05 17:38:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113601431917341690 2024-12-05 20:22:53+00:00| seen| https://t.me/cvedetector/12131...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-54127

creationtimestamp| type| source ---|---|--- 2024-12-05 12:32:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113600229631592844 2024-12-05 15:21:15+00:00| seen| https://t.me/cvedetector/12082...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-53614

creationtimestamp| type| source ---|---|--- 2024-12-04 15:56:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113595368251611466 2024-12-04 17:35:56+00:00| seen| https://t.me/cvedetector/12010...

GHSA-JCXM-7WVP-G6P5

creationtimestamp| type| source ---|---|--- 2024-12-04 15:30:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113595269145037059 2024-12-04 19:41:19+00:00| seen| https://infosec.exchange/users/obivan/statuses/113596254096758916 2026-07-23 19:00:49+00:00| seen|...

CVE-2024-11093

creationtimestamp| type| source ---|---|--- 2024-12-04 03:07:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113592347894947803 2024-12-04 05:02:44+00:00| seen| https://t.me/cvedetector/11944...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims

The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...

CVE-2024-49410

creationtimestamp| type| source ---|---|--- 2024-12-03 05:52:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113587330956993513 2024-12-03 05:55:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113587345033487551 2024-12-03 08:08:27+00:00| seen| https://t.me/cvedetector/118...