/
data_types_exposed:email_content × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · high

Hacktron discloses one-click UXSS in Perplexity Comet via XSS on a perplexity.ai subdomain and externally_connectable abuse

Hacktron researchers disclosed a one-click universal XSS (UXSS) in Perplexity Comet, a Chromium-based AI browser with the Comet Assistant agent extension. The extension's manifest trusts the wildcard https://.perplexity.ai/ in externallyconnectable, so a single XSS on any perplexity.ai subdomain can reach privileged extension message hand…

technology
cisa.gov · high

LAUNDRY BEAR exploits Zimbra CVE-2025-66376 (zero-day since July 2025) to exfiltrate email from Western organizations

A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…

CVE-2025-66376 LAUNDRY BEAR Void Blizzard government defense