Kirtikumar Anandrao Ramchandani

Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.

Name of the Vulnerable Software and Affected Versions: Firefox for Android versions prior to 141 Description: Firefox for Android displayed URLs in the address bar by truncating the end of the URL instead of prioritizing the origin, potentially misleading users about the actual website they are visiting. Recommendations: Update Firefox for Android to version 141 or later.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 127 Firefox ESR versions prior to 115.12 Thunderbird versions prior to 115.12 Description: The issue is related to the Offscreen Canvas not properly tracking cross-origin tainting, potentially allowing access to image data from another site in violation of same-origin policy. This could be exploited by a remote attacker to bypass security restrictions. Recommendations: For Firefox versions prior to 127, update to version 127 or later to resolve the issue. For Firefox ESR versions prior to 115.12, update to version 115.12 or later to resolve the issue. For Thunderbird versions prior to 115.12, update to version 115.12 or later to resolve the issue.

The issue is related to a use after free in Vulkan, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.

The issue is related to the Intent mechanism in Mozilla Firefox for Android, which can be exploited by a remote attacker to download arbitrary files due to the lack of request execution when opening third-party applications. This vulnerability can expose users to unpatched vulnerabilities in Android applications launched from the browser using Intents. To mitigate this, Firefox now confirms with users before launching external applications.

The issue is related to an inappropriate implementation in the Autofill feature, allowing a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. This could be achieved by exploiting the vulnerability with a specially created HTML page.

A logic issue was addressed with improved state management. Processing maliciously crafted web content may bypass Same Origin Policy. This issue is related to errors in state management in WebKitGTK and WPE WebKit modules, which can allow an attacker to impact data integrity.

A spoofing issue existed in the handling of URLs, which was addressed with improved input validation. Visiting a website that frames malicious content may lead to UI spoofing.

A Drag and Drop spoof vulnerability was discovered, allowing a spoofing of the address bar when a user performs a drag and drop operation on the address bar.

A vulnerability was discovered that affects the F-Secure SAFE browser. It allows an attacker to potentially exploit the Javascript `window.open` functionality, which could lead to address bar spoofing attacks.

The issue occurs when a Private Window with Tor Connectivity is used, causing .onion URLs to leak in Referer and Origin headers. Although this was fixed by Brave, the Brave documentation notes that Private Windows with Tor Connectivity in Brave are just regular private windows that use Tor as a proxy and do not implement most of the privacy protections from Tor Browser.

A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails. This issue allows for potential phishing attacks due to incorrect address bar display when navigation fails.

A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number.

An Address bar spoofing issue was discovered. When a user clicks on a specially crafted malicious webpage/URL, the user may be tricked into thinking the content comes from a valid domain, while it actually comes from an attacker-controlled site. This deception lasts until the page loads.

The issue is related to the handling of USSD codes in tel: links. When a user clicks on such a link, USSD codes specified after a `*` character are included in the phone number. This could potentially lead to actions being performed on a user's account, similar to a cross-site request forgery attack, on certain phones or with certain carriers.

The issue is related to the mechanism of loading DLL libraries in the Firefox web browser for Windows. It is associated with the absence of quotes in writing elements or search paths. Exploitation of this issue could allow an attacker to cause a denial of service. If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries. However, the install directory is not world-writable by default. This bug only affects Firefox for Windows in a non-default installation. Other operating systems are unaffected.

The issue is related to a spoofing vulnerability in Microsoft Edge for the iOS operating system, which can be exploited by bypassing authentication. This can allow a remote attacker to conduct spoofing attacks.

The issue is related to shortcomings in the data source confirmation mechanism, allowing remote attackers to bypass the Same-Origin Policy (SOP) and spoof the address bar. This can enable a remote attacker to fake the content of the address bar.

The issue is related to authentication bypass via spoofing, allowing a remote attacker to replace the value of the address bar. This can potentially lead to spoofing the address bar, tricking users into believing they are on a different website.