4 matches found
CVE-2025-55996
Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...
CVE-2025-55996
creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...
CVE-2025-55996
Viber Desktop version 25.6.0 and potentially earlier are vulnerable to HTML Injection via the text parameter in the message compose or forward interface. The application fails to properly neutralize input, allowing the rendering of unvalidated HTML content through the deep link handler (viber://f...