FreeBSD : chromium -- multiple vulnerabilities (e12432af-8e73-11ec-8bc4-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e12432af-8e73-11ec-8bc4-3065ec8fd3ec advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed ...

Google Chrome < 98.0.4758.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 98.0.4758.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202202stable-channel-update-for-desktop14 advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to...

PT-2022-1717

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.102 Description The issue is related to a use after free in the Webstore API, which could potentially allow an attacker to exploit heap corruption via a crafted HTML page. This could happen if an...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in the Google Chrome Webstore API, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...

Google Chrome < 98.0.4758.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 98.0.4758.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202202stable-channel-update-for-desktop14 advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 11 security fixes, including: 1290008 High CVE-2022-0603: Use after free in File Manager. Reported by Chaoyuan Peng @ret2happy on 2022-01-22 1273397 High CVE-2022-0604: Heap buffer overflow in Tab Groups. Reported by Krace on 2021-11-24 1286940 High...

KLA12462 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in File Manager can be exploited t...

CVE-2021-41274

solidusauthdevise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidusauthdevise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevi...

CVE-2021-41274

The CVE-2021-41274 entry concerns solidus_auth_devise, which provides authentication for Solidus via the Devise gem. A CSRF weakness allows account takeover when protect_from_forgery is executed before the :load_object hook in Spree::UserController, for configurations using :null_session or :rese...

SQL Injection Vulnerability in us***.php page ty*** parameter of webstore website builder system

Xi'an BaiLian Network Technology Co., Ltd. is a domestic technology company specializing in bearing industry management software development and bearing industry portal design. Web mall building system us.php page ty parameters exist SQL injection vulnerability, attackers can use the vulnerabilit...

algam-webstore.fr XSS vulnerability

Open Bug Bounty ID: OBB-666149 Description| Value ---|--- Affected Website:| algam-webstore.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Introducing: Malwarebytes Browser Extension

Are you tired of all the unwanted content the world wide web offers up, whether you like it or not? It is our privilege to introduce you to the Malwarebytes Browser Extension BETA. Or, better said, the Malwarebytes Browser Extensions, because we have one for Firefox and one for Chrome. Introducti...

horse-ball.org XSS vulnerability

Open Bug Bounty ID: OBB-557064 Description| Value ---|--- Affected Website:| horse-ball.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

webstore.iec.ch XSS vulnerability

Open Bug Bounty ID: OBB-388625 Description| Value ---|--- Affected Website:| webstore.iec.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

cherokeespirits.com XSS vulnerability

Open Bug Bounty ID: OBB-280723 Description| Value ---|--- Affected Website:| cherokeespirits.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

uslahy.com XSS vulnerability

Open Bug Bounty ID: OBB-280708 Description| Value ---|--- Affected Website:| uslahy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bape.com XSS vulnerability

Vulnerable URL: https://bape.com/webstore/?brandid==%22%3E%3C/script%3E%3C/title%3E%3Cimg%20src=x%20onerror=alert/openbugbounty/%3E===MQ===1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

webstore.com XSS vulnerability

Vulnerable URL: http://www.webstore.com/stores.php?option=storesearchname=asd...

bape.com XSS vulnerability

Vulnerable URL: https://bape.com/webstore/?brandid=--" " "...

cgiCentral WebStore 400 Administrator Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2860/info cgiCentral's Webstore is an shopping cart application which processes and manages online purchases. A vulnerability exists in Webstore which may allow attackers to obtain administrative privileges. The...