CVE-2026-100776

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Firefox web browser. The vulnerability has been addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . Exploitation details are not provided in the documents, but the issue is reported with a hi...

EUVD-2026-88928

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100776 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100776 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100769

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100769 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100769

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Firefox browser. This flaw was addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . The vulnerability is reported to have a high impact. No specific exploit details or public proof-of-concepts...

CVE-2026-100769 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

EUVD-2026-88921

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100765

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

EUVD-2026-88917

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...

CVE-2026-100765

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox . This flaw was addressed in Firefox ESR 153.4 and Firefox 157 . No specific exploit details are provided in the documents, but the vulnerability is reported to have a high impact .

CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-88362

A flaw was found in MuJS. An attacker can trigger a Denial of Service DoS by providing specially crafted JavaScript input containing an excessively large array index. This flaw causes an out-of-range numeric value to be converted to an integer without proper validation, leading to undefined...

npm-demo

浏览器演示（NPM/JavaScript） 有关如何运行和使用此演示的说明，请参阅实操试用指南。...

CVE-2026-84739

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in the context of another user's browser session due to...

CVE-2026-39107

CVE-2026-39107：Kimi AI v1.0 中的跨站脚本（XSS）漏洞 描述 Kimi AI v1.0 Web 界面的“预览”功能中存在跨站脚本（XSS）漏洞。应用程序未能正确清理或编码由 AI 模型生成的 HTML/JavaScript 载荷。当用户切换到“预览”选项卡查看 AI 生成的代码时，恶意载荷直接渲染到 DOM 中，导致受害者浏览器会话中执行任意 JavaScript。 研究员 Mustafa Hameed 漏洞详情 漏洞类型： 通过 AI 响应触发的存储型/类存储型跨站脚本（XSS） 受影响产品： Kimi AI 受影响版本： v1.0 受影响组件： “预览”选...

CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

ritecms

🛡️ CVE-2024-28623 – RiteCMS v3.0.0 中的 XSS 漏洞 🔍 概述 本仓库记录了一个在 RiteCMS v3.0.0 中发现的跨站脚本（XSS）漏洞，该漏洞由我报告并分配了 CVE 编号 CVE-2024-28623 。 📄 漏洞详情 CVE ID ：CVE-2024-28623 产品 ：RiteCMS 受影响版本 ：v3.0.0 漏洞类型 ：反射型跨站脚本（XSS） 漏洞组件 ：mainmenu/editsection 状态 ：已在 NVD 上公开披露 ⚠️ 影响 该 XSS 漏洞允许攻击者在受害者浏览器中执行任意 JavaScript，从而导致：...