317 matches found
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230: Incorrect Default Permissions
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
CVE-2025-55204
The CVE-2025-55204 entry concerns the Muffon desktop music client. Affected versions are prior to 2.3.0, where a one-click Remote Code Execution (RCE) vulnerability exists via a specially crafted muffon:// link. When a user visits a page or clicks the link, Muffon’s custom URL handler is triggere...
CVE-2025-62119: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link custom-url-to-featured-image allows DOM-Based XSS.This issue affects Add Featured Image Custom Link: from n/a through = 2.0.0...
CVE-2025-67739: Improper Authorization in Handler for Custom URL Scheme
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...
EUVD-2020-30639
Malware in sbrugna...
EUVD-2024-41372
Malicious code in bioql PyPI...
EUVD-2025-7440
Malicious code in bioql PyPI...
EUVD-2024-45722
Malicious code in bioql PyPI...
EUVD-2025-26966
Malicious code in bioql PyPI...
EUVD-2022-15232
Malicious code in bioql PyPI...
EUVD-2021-8246
Malicious code in bioql PyPI...
EUVD-2021-8247
Malicious code in bioql PyPI...
EUVD-2021-8282
Malicious code in bioql PyPI...
EUVD-2021-8189
Malicious code in bioql PyPI...
EUVD-2024-16994
Malicious code in bioql PyPI...
EUVD-2021-8147
Malicious code in bioql PyPI...
CVE-2025-54374 Eidos: One-click Remote Code Execution through Custom URL Handling
Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a...