Browsing the "extension" Tag

DotNetNuke CMS 9.5.0 File Extension Check Bypass

February 24th, 2020 📆 | 3732 Views ⚑

Tagged with: advisory • bypass • check • cms • CSRF • dotnetnuke • exploit • extension • File • overflow • scanner • security • vulnerability • whitepaper • XSS

Canary-build Microsoft browser blocks Microsoft extension from inflicting Microsoft search engine

February 7th, 2020 📆 | 4462 Views ⚑

There's at least one browser out there unwilling to accept Microsoft's attempts to fiddle with search settings, and it's made

Tagged with: blocks • browser • build • canary • extension • microsoft

Another LastPass Outage After Chrome Extension Mistakenly Removed

January 26th, 2020 📆 | 7456 Views ⚑

LastPass has recently troubled users when it locked out people from accessing their accounts due to a bug. Once again,

Tagged with: after • another • chrome • extension • lastpass • mistakenly • outage

libyang up to 1.0-r2 lys_extension_instances_free() denial of service

January 24th, 2020 📆 | 8106 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.4 $0-$5k 4.33- A vulnerability was found in libyang

Tagged with: denial • extension • instances • libyang • service

WikibaseMediaInfo Extension 1.35 on MediaWiki PropertySuggestionsWidget.mustache+dom cross site scripting

January 8th, 2020 📆 | 1861 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: cross • extension • mediawiki • mustache • propertysuggestionswidget • scripting • wikibasemediainfo

Shitcoin Wallet Extension Isn’t A Crypto Wallet But A Crypto Stealer

January 4th, 2020 📆 | 4088 Views ⚑

Taking advantage of cryptocurrency owners attackers have once again deployed a malicious tool online. This time, they have guised their

Tagged with: crypto • extension • shitcoin • stealer • wallet

Malware Chrome extension steals $16,000 from Ledger wallet user

January 3rd, 2020 📆 | 5701 Views ⚑

If you have a Google Chrome extension named ‘Ledger Secure’ installed, you should consider removing it immediately. Confirmed reports claim

Tagged with: chrome • extension • ledger • malware • steals • wallet

Xorbin Analog Flash Clock Extension 1.0 on Joomla xorAnalogClock.swf cross site scripting

December 28th, 2019 📆 | 2258 Views ⚑

A vulnerability was found in Xorbin Analog Flash Clock Extension 1.0 on Joomla (Joomla Component). It has been declared as

Tagged with: Analog • clock • extension • flash • joomla • xoranalogclock • xorbin

Xorbin Digital Flash Clock Extension 1.0 on WordPress xorAnalogClock.swf widgetUrl cross site scripting

December 28th, 2019 📆 | 2549 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: clock • digital • extension • flash • wordpress • xoranalogclock • xorbin

Create Custom Extension To Bring Back ‘www’ in Google Chrome Browser

December 28th, 2019 📆 | 4494 Views ⚑

Google’s decision to truncate website URLs by hiding the ‘www’ in its Chrome browser troubled many users. Being the most

Tagged with: bring • browser • chrome • create • custom • extension • google

PHP up to 7.2.25/7.3.12 EXIF Extension exif_read_data() Image File memory corruption

December 23rd, 2019 📆 | 6971 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: corruption • extension • image • memory

PHP up to 7.2.25/7.3.12 EXIF Extension exif_read_data() memory corruption

December 23rd, 2019 📆 | 6201 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: corruption • extension • memory

JS JOBS FREE Extension up to 1.2.6 on Joomla models/custormfields.php dataForDepandantField Parameter sql injection

December 20th, 2019 📆 | 7722 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: custormfields • datafordepandantfield • extension • injection • joomla • models • parameter

TYPO3 up to 8.7.29/9.5.11/10.2.1 Extension Manager ZIP Archive directory traversal

December 19th, 2019 📆 | 2993 Views ⚑

A vulnerability was found in TYPO3 up to 8.7.29/9.5.11/10.2.1 (Content Management System). It has been classified as critical. This affects

Tagged with: archive • directory • extension • manager • traversal • typo3

VisualEditor Extension up to 1.34 on MediaWiki Clipboard data-ve-clipboard-key cross site scripting

December 11th, 2019 📆 | 4546 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: clipboard • cross • extension • mediawiki • scripting • visualeditor

Burp Suite Secret Finder – Burp Suite Extension To Discover Apikeys/Tokens From HTTP Response

December 4th, 2019 📆 | 1979 Views ⚑

Burp Suite extension to discover a apikey/tokens from HTTP response. Install wget https://raw.githubusercontent.com/m4ll0k/BurpSuite-Secret_Finder/master/SecretFinder.py orgit clone https://github.com/m4ll0k/BurpSuite-Secret_Finder.git now open Burp >

Tagged with: apikeys • discover • extension • finder • secret • suite

Microsoft Windows AppXsvc Deployment Extension – Privilege Escalation

November 27th, 2019 📆 | 2512 Views ⚑

# Exploit Title: Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation # Date: 2019-11-22 # Exploit Author: Abdelhamid Naceri #

Tagged with: appxsvc • deployment • escalation • extension • microsoft • privilege • windows

GnuPG up to 1.4.18/2.0.26/2.1.1 Sign Extension kbx/keybox-search.c Keyring File memory corruption

November 21st, 2019 📆 | 6635 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: corruption • extension • gnupg • keybox • keyring • memory • search

AbuseFilter Extension up to 1.34 on MediaWiki information disclosure

November 16th, 2019 📆 | 2535 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.5 $0-$5k 2.78+ A vulnerability classified as problematic was

Tagged with: abusefilter • disclosure • extension • information • mediawiki

Asset Discover – Burp Suite Extension To Discover Assets From HTTP Response

November 13th, 2019 📆 | 7978 Views ⚑

Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite

Tagged with: asset • assets • discover • extension • response • suite

TYPO3 up to 4.1.13/4.2.12/4.3.3/4.4.0 Extension Manager cross site scripting

November 6th, 2019 📆 | 5184 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) 3.4 $0-$5k A vulnerability classified as problematic was found in TYPO3 up

Tagged with: cross • extension • manager • scripting • typo3

Cryptocat Extension up to 2.0.21 on Chrome img/keygen.gif information disclosure

November 5th, 2019 📆 | 8144 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) 3.4 $0-$5k A vulnerability was found in Cryptocat Extension up to 2.0.21

Tagged with: chrome • cryptocat • disclosure • extension • information • keygen

CheckUser Extension up to 1.34 on MediaWiki API information disclosure

October 30th, 2019 📆 | 5384 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) 3.5 $0-$5k A vulnerability was found in CheckUser Extension up to 1.34

Tagged with: checkuser • disclosure • extension • information • mediawiki

AbuseFilter Extension up to 1.34 on MediaWiki information disclosure

October 30th, 2019 📆 | 5094 Views ⚑

A vulnerability was found in AbuseFilter Extension up to 1.34 on MediaWiki. It has been classified as problematic. This affects

Tagged with: abusefilter • disclosure • extension • information • mediawiki