Tagged: Electron

electronegativity

electronegativity v1.10 releases: identify misconfigurations and security anti-patterns in Electron applications

Electronegativity It is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as described in the “Electron Security Checklist – A Guide for Developers...

CVE-2018-1000006

CVE-2018-1000006: Electron remote code execution vulnerability

On January 22, 2018,  a known security vulnerability (CVE-2018-1000006) affecting Windows users of Electron-based programs (like discord) was made public. These bugs allow attacker take remote code execution on vulnerable programs. Electron is an open source...