Alan Li

اسم البرنامج المعرض للخطر والإصدارات المتأثرة: إصدارات Firefox الأقدم من الإصدار 140 الوصف: تمكن أحد المهاجمين من التحايل على توجيه `connect-src` في سياسة أمان المحتوى من خلال التلاعب بالوثائق الفرعية، مما أدى أيضًا إلى إخفاء الاتصالات في علامة التبويب «الشبكة» في DevTools. التوصيات: بالنسبة للإصدارات الأقدم من الإصدار 140، قم بالتحديث إلى الإصدار 140 أو أحدث لحل المشكلة. كحل مؤقت، ضع في اعتبارك تقييد استخدام المستندات الفرعية لتقليل مخاطر الاستغلال.

An OS command injection issue has been reported, allowing authenticated users to execute commands via a network.

A path traversal issue has been reported, allowing authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network.

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. The issue is related to the lack of protection measures for the web page structure, which could allow a remote attacker to execute arbitrary code.

An OS command injection issue has been reported, potentially allowing authenticated users to execute commands via a network. The vulnerability is related to insufficient protection of the web page structure, which could enable a remote attacker to execute arbitrary commands.

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.

The issue is related to an OS command injection vulnerability. It could allow an authenticated user to execute commands via a network. This vulnerability exists due to the lack of measures to neutralize special elements.

An OS command injection issue has been reported, potentially allowing authenticated users to execute commands via a network.