viber-desktop-html-injection

Viber Desktop — HTML 인젝션 CVE-2025-55996 CVE: CVE-2025-55996 발견자: Thaw Khant Cycbake 제품: Viber Desktop 영향받는 버전: Viber Desktop 25.6.0 및 그 이전 버전 가능성 요약 Viber Desktop의 딥링크 핸들러viber://forward?text=는 메시지 작성/전달 인터페이스 내에서 text 매개변수에 제공된 정화되지 않은 HTML을 렌더링할 수 있습니다. 스크립트 실행은 클라이언트에 의해 제한되는 것으로 보이지만, 공격자가 통제...

Cursor 操作系统命令注入漏洞

Cursor is an AI code editor from Cursor open source. An operating system command injection vulnerability exists in Cursor versions 1.17 through 1.2, which stems from an information disclosure in the MCP deep link handler that could lead to arbitrary system command execution...

Remote code execution

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...