PT-2022-2788

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version affected versions not specified Description The issue exists due to inadequate filtering for special characters in the webpage input field, allowing an unauthenticated LAN attacker to perform a command injection attack...

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a Security Feature Issue vulnerability that is caused due to incorrect execution in full-screen mode in Google Chrome. A remote attacker could create a specially crafted web...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that exists due to a post-release usage error in the Portal component in Google Chrome. A remote attacker could create a specially...

Google Chrome 代码问题漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A code issue vulnerability exists in Google Chrome due to incorrect input validation in the WebOTP component in Google Chrome. A remote attacker could trick a victim into opening a specially crafted w...

stored xss

Description Stored XSS is a vulnerability in which the attacker can execute arbitrary javascript code in the victim's browser. The XSS payload is stored in a webpage and it gets executed whenever someone visits that webpage Proof of Concept 1. A low-priv user create a page with the following...

The vulnerability of the GPU Process browser processes in Microsoft Edge and Google Chrome allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the GPU Process browser engines in Microsoft Edge and Google Chrome is related to buffer overflows during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created...

Side-Channel Attacks

firefox is vulnerable to side channel attack. The vulnerability exists due to the text using specially crafted fonts which will lead to it being inferred by the webpage...

The vulnerability of the File Manager API of Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the File Manager API in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML...

CVE-2021-41541

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.44, Climatix POL909 AWM module All versions V11.36. The Group Management page of affected devices is vulnerable to cross-site scripting XSS. The vulnerability allows an attacker to send malicious JavaScript code...

CVE-2021-41542

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.44, Climatix POL909 AWM module All versions V11.36. The User Management page of affected devices is vulnerable to cross-site scripting XSS. The vulnerability allows an attacker to send malicious JavaScript code whi...

Cross site scripting

A vulnerability has been identified in Climatix POL909 AWB module All versions V11.44, Climatix POL909 AWM module All versions V11.36. The User Management page of affected devices is vulnerable to cross-site scripting XSS. The vulnerability allows an attacker to send malicious JavaScript code whi...

AVEVA System Platform

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: System Platform Vulnerability: Cleartext Storage of Sensitive Information in Memory 2. RISK EVALUATION Successful exploitation of this vulnerability could expose cleartext credentials for the network user...

The vulnerability of the Mojo browser’s execution time library allows a hacker to execute arbitrary code.

The vulnerability of the Mojo browser’s execution time library is due to a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created web page from a remote location...

The vulnerability of the Webstore API component of Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Webstore API component for Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code through a specially created web page...

Cross-site Scripting (XSS) - Reflected

Description The endpoint https://demo.microweber.org/demo/admin/post/id/edit is vulnerable to cross site scripting. The "Edit source" field is affected. Proof of Concept 1. Login into https://demo.microweber.org 2. Navigate to https://demo.microweber.org/demo/admin/post/25/edit 3. click EditSourc...

clubradiocb.it Cross Site Scripting vulnerability OBB-2378625

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0301

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2022-0289

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2022-0289

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0114

Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...