SUSE CVE-2022-1919

Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2022-38223

There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact...

Security Bulletin: IBM CICS TX Standard is vulnerable to HTML injection (CVE-2022-34160)

Summary IBM CICS TX Standard could allow a remote attacker to inject malicious HTML code. The fix removes this vulnerability CVE-2022-34160 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34160 DESCRIPTION: IBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A...

Security Bulletin: IBM CICS TX Standard is vulnerable to allowing access to a user's web browser session due to insufficiently protected credentials (CVE-2022-34311).

Summary IBM CICS TX Standard could allow access to a user's web browser session due to insufficiently protected credentials. The fix removes this vulnerability CVE-2022-34311 from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2022-34311 DESCRIPTION: IBM CICS TX could allow a user with...

Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing access to a user's web browser session due to insufficiently protected credentials (CVE-2022-34311).

Summary IBM CICS TX Advanced could allow access to a user's web browser session due to insufficiently protected credentials. The fix removes this vulnerability CVE-2022-34311 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2022-34311 DESCRIPTION: IBM CICS TX could allow a user with...

Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure

The plugin does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones. Run one of the below commands in the developer...

Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure

The plugin does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones. Note: This requires the OceanWP theme to be...

Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure

The plugin does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones. PoC Note: This requires the OceanWP theme to be...

[SECURITY] Fedora 36 Update: chromium-110.0.5481.77-1.fc36

Chromium is an open-source web browser, powered by WebKit Blink...

Resume Builder <= 3.1.1 - Subscriber+ Stored XSS

The plugin does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users Run the below command in the developer console of the web browser while being on the blog as subscriber...

Resume Builder <= 3.1.1 - Subscriber+ Stored XSS

The plugin does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users PoC Run the below command in the developer console of the web browser while being on the blog as...

Fedora: Security Advisory for chromium (FEDORA-2023-4e6353c6f7)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MAL-2023-1788 Malicious code in discord-webhoo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fa7963a8da1102b0d2c2eae15aeecd878adb1416bc8c66b6e4a7384f16c5d32d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in sleenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c4ea3a06cb61d4b5b9b24839db0b9f4d57dec74215095de114d48479c4af2c0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Google Chrome Out-of-Bounds Read Vulnerability (CNVD-2023-12022)

Google Chrome is a web browser from Google, an American company. An out-of-bounds read vulnerability exists in versions of Google Chrome prior to 110.0.5481.77. The vulnerability stems from the lack of proper validation of user-supplied data in WebRTC, where specially crafted data may trigger a...

The vulnerability of the Core web browser component in Google Chrome, which allows a hacker to increase their privileges

The vulnerability of the Core web browser component in Google Chrome is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to trigger memory corruption and elevate their privileges to the root level...

Malicious code in wwebsockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d9ac53e153cfdacc0c0acbb6efed677bb982bfc33626bbd58a67a0719e08250d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in webssockets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33218237eb5a89cad81db80c5bb65d594f15f397071a0fca8e21c53f63885b75 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/Deletion

The plugin does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to allowing any authenticated user who can edit posts to call the endpoints related to WPCode Library authentication such as update and delete the auth key. As a contributo...

Replyable < 2.2.10 - Subscriber+ PHP Object Injection

The plugin does not validate the class name submitted by the request when instantiating an object in the promptdismissnotice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could...