CVE-2026-100769

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of the Firefox browser. This flaw was addressed in Firefox ESR 153.4 , Firefox 157 , and Firefox ESR 140.17 . The vulnerability is reported to have a high impact. No specific exploit details or public proof-of-concepts...

CVE-2026-100769

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100769 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17...

EUVD-2026-88921

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17...

CVE-2026-100765

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

EUVD-2026-88917

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...

CVE-2026-100765

A use-after-free vulnerability exists in the JavaScript: WebAssembly component of Firefox . This flaw was addressed in Firefox ESR 153.4 and Firefox 157 . No specific exploit details are provided in the documents, but the vulnerability is reported to have a high impact .

CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-100765 Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-88362

A flaw was found in MuJS. An attacker can trigger a Denial of Service DoS by providing specially crafted JavaScript input containing an excessively large array index. This flaw causes an out-of-range numeric value to be converted to an integer without proper validation, leading to undefined...

npm-demo

Browser Demo NPM/JavaScript For instructions on how to run and use this demo, see the Hands-On Trial Guide...

CVE-2026-84739

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary JavaScript in the context of another user's browser session due to...

CVE-2026-39107

CVE-2026-39107: Cross-Site Scripting XSS en Kimi AI v1.0 Descripción Existe una vulnerabilidad de Cross-Site Scripting XSS en la función 'Preview' de la interfaz web de Kimi AI v1.0. La aplicación no sanea ni codifica adecuadamente las cargas útiles HTML/JavaScript generadas por el modelo de IA...

CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

ritecms

🛡️ CVE-2024-28623 – Vulnerabilidad XSS en RiteCMS v3.0.0 🔍 Descripción general Este repositorio documenta una vulnerabilidad de Cross-Site Scripting XSS descubierta en RiteCMS v3.0.0 , que reporté y a la que se le asignó el ID de CVE CVE-2024-28623. 📄 Detalles de la vulnerabilidad CVE ID :...

Apache-Druid-CVE-2021-25646-Exploit

Apache Druid RCE Exploit CVE-2021-25646 Exploit Python para ejecución remota de código en Apache Druid mediante inyección de código JavaScript CVE-2021-25646. Descripción Este script explota una vulnerabilidad de RCE en Apache Druid versiones 0.20.1 que permite la ejecución arbitraria de código a...

Malicious code in express-javascript (npm)

The package express-javascript impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

MAL-2026-17242 Malicious code in express-javascript (npm)

The package express-javascript impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...

external_v8_AOSP10_r33_CVE-2021-0396

Motor JavaScript V8 V8 es el motor JavaScript de código abierto de Google. V8 implementa ECMAScript según lo especificado en ECMA-262. V8 está escrito en C++ y se utiliza en Google Chrome, el navegador de código abierto de Google. V8 puede ejecutarse de forma independiente o integrarse en cualqui...

CVE-2025-56605

CVE-2025-56605 XSS Vulnerabilidad de Cross-Site Scripting CVE-2025-56605 — XSS Reflejado en Event Management System 1.0 Descripción: Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en register.php de PuneethReddyHC/event-management 1.0. El parámetro POST mobile no se valida...