Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:bilibili:bilibili_desktop:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Bilibili Desktop TLS Verification Bypass and Remote JavaScript Injection

Bilibili Desktop versions 1.18.0 and earlier are vulnerable to remote command execution and credential theft due to disabled TLS certificate verification and the execution of unsigned remote JavaScript configurations.

Bilibili Desktop vulnerability rce credential-theft mitm
2t 1c