7262 matches found
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
CVE-2024-53938
creationtimestamp| type| source ---|---|--- 2024-12-02 22:15:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113585536553029868 2024-12-02 23:46:44+00:00| seen| https://t.me/cvedetector/11832...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
AZL-54227 CVE-2024-53120 affecting package kernel for versions less than 6.6.64.2-1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5tcctentryaddrule, in case ctruleadd callback returns error, zonerule-attr is used uninitiated. Fix it to use attr which has the needed pointer value...
UBUNTU-CVE-2024-53120
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5tcctentryaddrule, in case ctruleadd callback returns error, zonerule-attr is used uninitiated. Fix it to use attr which has the needed pointer value...
Are You Being Tracked by an AirTag? Here’s How to Check
If you’re worried that one of Apple’s trackers is following you without consent, try these tips...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims
The Mozilla Foundation's Security Advisory: Enhanced Tracking Protection's Strict mode may inadvertently allow a CSP frame-src bypass and DOM-based cross-site scripting XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could expose users to malicious frames...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the mlx5tcctentryaddrule function in the net/mlx5e component, where the zonerule-attr is used...
CVE-2024-12000
creationtimestamp| type| source ---|---|--- 2024-11-30 12:00:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113571794336079178 2024-11-30 22:25:58+00:00| seen| https://t.me/cvedetector/11699...
CVE-2024-11996
creationtimestamp| type| source ---|---|--- 2024-11-30 07:35:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113570750044570445 2024-11-30 14:04:18+00:00| seen| https://t.me/cvedetector/11678...
GHSA-QMC2-JPR5-7RG9
creationtimestamp| type| source ---|---|--- 2024-11-29 18:58:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113567774025902212...
How Python Software Development Enhances Cyber Defense
Python has emerged as a powerful ally in combating rising cybersecurity threats and tracking cybercrime through tools leveraging…...
CVE-2024-48651
creationtimestamp| type| source ---|---|--- 2024-11-29 05:05:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113564497981373405 2024-11-29 17:05:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113567330072557042 2024-12-03 07:54:31+00:00| seen|...