Lucene search
+L

31 matches found

RedhatCVE
RedhatCVE
•added 2026/05/04 8:21 p.m.•20 views

CVE-2026-7686

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.7AI score0.00564EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/03 8:16 a.m.•41 views

CVE-2026-7686

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS0.00564EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/03 7:30 a.m.•25 views

EUVD-2026-26824

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.4AI score0.00564EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/03 7:30 a.m.•14 views

CVE-2026-7686

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.7AI score0.00564EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/05/03 7:30 a.m.•134 views

CVE-2026-7686

Eyeo Adblock Plus (Chrome) up to 4.36.2 contains a vulnerability in postMessage handling within premium.preload.js (Legacy Premium Activation). Exploitation allows improper access controls with remote execution; the attack is publicly disclosed. The vendor notes the legacy activation path is depr...

6.9CVSS5.7AI score0.00564EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/03 7:30 a.m.•16 views

CVE-2026-7686 eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.7AI score0.00564EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/03 7:30 a.m.•70 views

CVE-2026-7686 eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS0.00564EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•33 views

Adblock Plus 安全漏洞

Adblock Plus is an advertising blocker developed by Ad-IP under open source principles. Versions of Adblock Plus 4.36.2 and earlier contain a security vulnerability, which stems from the postMessage function in the Legacy Premium Activation component’s premium.preload.js file. This vulnerability...

6.9CVSS6.1AI score0.00564EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•3 views

CVE-2026-7686: Improper Access Control

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.3AI score0.00564EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/03 12:00 a.m.•49 views

PT-2026-36689

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activation. Performing a manipulation results in improper access controls. Remote exploitation of the...

6.9CVSS5.7AI score0.00564EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-3263

Malware in sbrugna...

8.1CVSS8.2AI score0.02491EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/22 4:23 a.m.•18 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.1CVSS7.5AI score0.02491EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/04/21 4:47 p.m.•16 views

[SECURITY] Fedora 41 Update: rust-adblock-0.9.6-1.fc41

Native Rust module for Adblock Plus syntax e.g. EasyList, EasyPrivacy filter parsing and matching...

7.4AI score
SaveExploits0
Fedora
Fedora
•added 2025/04/21 1:41 a.m.•19 views

[SECURITY] Fedora 40 Update: rust-adblock-0.9.6-1.fc40

Native Rust module for Adblock Plus syntax e.g. EasyList, EasyPrivacy filter parsing and matching...

7.4AI score
SaveExploits0
Fedora
Fedora
•added 2025/04/20 4:23 a.m.•16 views

[SECURITY] Fedora 42 Update: rust-adblock-0.9.6-1.fc42

Native Rust module for Adblock Plus syntax e.g. EasyList, EasyPrivacy filter parsing and matching...

7.4AI score
SaveExploits0
OSV
OSV
•added 2019/04/29 3:29 p.m.•15 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.1CVSS7.5AI score0.02491EPSS
SaveExploits0References5
NVD
NVD
•added 2019/04/29 3:29 p.m.•31 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.1CVSS8.3AI score0.02491EPSS
SaveExploits0References5
Prion
Prion
•added 2019/04/29 3:29 p.m.•20 views

Open redirect

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

6.8CVSS8.2AI score0.02491EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2019/04/29 2:30 p.m.•56 views

CVE-2019-11593

CVE-2019-11593 affects Adblock Plus prior to 3.5.2. The vulnerability arises from the $rewrite filter option , which can let filter-list maintainers execute arbitrary code in a client-side session when a service loads a script via XMLHttpRequest or Fetch if the script origin has an open redirect....

8.1CVSS8.2AI score0.02491EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2019/04/29 2:30 p.m.•38 views

CVE-2019-11593

In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

8.3AI score0.02491EPSS
SaveExploits0References5
Rows per page
Query Builder