The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a data source confirmation error during the processing of the resource://pdf.js path. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gai...

CVE-2024-51619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in market360 Market 360 Viewer market-360-viewer allows Blind SQL Injection.This issue affects Market 360 Viewer: from n/a through = 1.01...

CVE-2024-51619 WordPress Market 360 Viewer plugin <= 1.01 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in market360 Market 360 Viewer market-360-viewer allows Blind SQL Injection.This issue affects Market 360 Viewer: from n/a through = 1.01...

CVE-2024-51619

CVE-2024-51619 affects WordPress plugin Market360 Viewer (versions

WordPress plugin Market 360 Viewer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2024-34762 · Unknown · Market 360 Viewer

Name of the Vulnerable Software and Affected Versions: Market 360 Viewer versions n/a through 1.01 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for Blind SQL Injection in the Market 360 Viewe...

WordPress Algori PDF Viewer plugin <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Algori PDF Viewer versions = 1.0.7...

Binary Vulnerability in Chart Viewer Program of Unisys Software Technology Ltd.

Unisys Software Technology Co., Ltd. is a leading manufacturer of operating systems in China. A binary vulnerability exists in the Unisys Software Technologies Ltd. viewing program, which can be exploited by attackers to cause a denial of service...

WordPress Algori PDF Viewer Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Algori PDF Viewer Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2018-5158 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f9da283093fc Credits Colin Xu Required...

Malicious code in chat-history-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede6c0203c0d5dfabc8b0ffe97bd7018474fd422452219e3554818ea925ffe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10477 Malicious code in chat-history-log-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede6c0203c0d5dfabc8b0ffe97bd7018474fd422452219e3554818ea925ffe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno IDE Desktop prior to version 1.29.1 exposes a vulnerability where Electron’s shell.openExternal is used to open URLs in the Markdown docs viewer without validating http/https. This can lead to untrusted URL handling and, per the connected reports, potential remote code execution on systems ...

Bruno 安全漏洞

Bruno is an open source IDE for exploring and testing Api from usebruno open source. A security vulnerability exists in Bruno version 1.29.1, which stems from Bruno's use of Electron shell.openExternal to open windows in the Markdown document viewer with no authentication...

PT-2024-33122 · Electron +1 · Electron +1

Name of the Vulnerable Software and Affected Versions: Bruno versions prior to 1.29.1 Description: The issue arises from Bruno's use of Electron's shell.openExternal function without proper validation of URLs, specifically http or https, when opening windows within the Markdown docs viewer. This...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

CVE-2024-48463

Bruno before 1.29.1 uses Electron shell.openExternal without validation of http or https for opening windows within the Markdown docs viewer...

WordPress Market 360 Viewer plugin <= 1.01 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Market 360 Viewer versions = 1.01...

WordPress Market 360 Viewer Plugin <= 1.01 is vulnerable to SQL Injection

Software Market 360 Viewer Type Plugin Vulnerable versions = 1.01 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51619 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 2a1f922321c0 Credits LVT-tholv2k Required privilege Contributor Publish...