CLEANSTART-2026-JH02542 protobufjs compiles protobuf definitions into JavaScript (JS) functions

CVE-2026-44291 affects multiple packages. protobufjs compiles protobuf definitions into JavaScript JS functions. See references for individual vulnerability details...

CLEANSTART-2026-SF05781 protobufjs compiles protobuf definitions into JavaScript (JS) functions

CVE-2026-59877 affects multiple packages. protobufjs compiles protobuf definitions into JavaScript JS functions. See references for individual vulnerability details...

CVE-2026-39911 Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE

Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows authenticated Standard Registry users to execute arbitrary code by passing user-supplied JavaScript expressions directl...

EUVD-2019-1916

Malware in sbrugna...

PT-2022-3529

Name of the Vulnerable Software and Affected Versions Secheron SEPCOS Single Package relay control and protection software affected versions not specified Description The issue is related to the incorrect implementation of a sequence of actions in the software. It allows a remote attacker to rebo...

Chaturbate: Passive stored XSS at broadcast room

The hacker found that a specially crafted app names could insert a small amount of data into an A tag's href in the "Broadcaster is running these apps: " chat text. Because of the character limit this required multiple successive clicks on different app names, and in the example utilised the room...

CVE-2018-1000640

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

CVE-2013-4660

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...

CVE-2013-4660

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...

CVE-2013-4660: Improper Input Validation

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...

PT-2013-5118

Name of the Vulnerable Software and Affected Versions js-yaml versions 2.0.4 and earlier Description The issue allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation, due to the JS-YAML module parsing input without properly considering the unsafe...