CVE-2025-3839 Epiphany: insecure external protocol invocation in epiphany

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-3839 Epiphany: insecure external protocol invocation in epiphany

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this...

CVE-2025-3839

CVE-2025-3839 affects Epiphany. A flaw in how Epiphany opens external URL handler applications with minimal user interaction can be abused to execute code on the client via trusted UI behavior. The root cause is insecure invocation of external handlers, enabling potential remote-looking actions w...

PT-2025-43784

Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Referral Link Tracker: from n/a through = 1.1.4...

EUVD-2018-3430

Malware in sbrugna...

EUVD-2015-6476

Malware in sbrugna...

EUVD-2008-5955

Malware in sbrugna...

EUVD-2015-6477

Malware in sbrugna...

EUVD-2010-3310

Malware in sbrugna...

EUVD-2021-31877

Malicious code in bioql PyPI...

EUVD-2023-29955

Malicious code in bioql PyPI...

EUVD-2022-33872

Malicious code in bioql PyPI...

EUVD-2021-31879

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-45088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page. CVE-2021-45088 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2018-11396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ephy-session.c in libephymain.so in GNOME Web aka Epiphany through 3.28.2.1 allows remote attackers to cause a denial of service application crash via JavaScrip...

Linux Distros Unpatched Vulnerability : CVE-2022-29536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page...

Linux Distros Unpatched Vulnerability : CVE-2017-1000025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Web Epiphany 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions, is vulnerable to a password manager swee...

Linux Distros Unpatched Vulnerability : CVE-2018-12016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libephymain.so in GNOME Web aka Epiphany through 3.28.2.1 allows remote attackers to cause a denial of service application crash via certain window.open and...

Linux Distros Unpatched Vulnerability : CVE-2025-3839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to...

The vulnerability in the Web browser Epiphany, related to the lack of user alerts about unsafe actions, allows a hacker to execute arbitrary code.

The vulnerability in the Web browser Epiphany is related to the lack of user alerts about unsafe actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...