Skip to content
Threat Feed
Subscribe

Vendor

EdgeEver

2 briefs RSS
high advisory

Stored XSS Vulnerability in EdgeEver setMemoDragPreview

EdgeEver versions 1.112.0 and earlier contain a stored XSS vulnerability in the setMemoDragPreview function that allows for session token theft via malicious notebook or memo titles.

EdgeEver web-application xss injection session-hijacking
2t 1c
high advisory

Remote Code Execution in EdgeEver Desktop via IPC Handler

EdgeEver Desktop versions 1.92.0 through 1.112.0 contain a remote code execution vulnerability in the desktop:acp-probe IPC handler that allows arbitrary command execution via an insecure probeAcpAdapter function.

EdgeEver Desktop +1 vulnerability web-application desktop-app
3t 1c