Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-6010

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.00271EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/03/05 8:17 p.m.4 views

CVE-2025-25303

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS7AI score0.00271EPSS
Exploits0References1
NVD
NVD
added 2025/03/03 5:15 p.m.7 views

CVE-2025-25303

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS0.00271EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/03 4:47 p.m.3 views

CVE-2025-25303 Server-Side Request Forgery (SSRF) in MouseTooltipTranslator

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS6.4AI score0.00271EPSS
Exploits0References3
CVE
CVE
added 2025/03/03 4:47 p.m.51 views

CVE-2025-25303

Summary: CVE-2025-25303 describes a Server-Side Request Forgery (SSRF) in the MouseTooltipTranslator Chrome extension. The issue stems from the pdf.mjs script, which uses the URL parameter from the current URL as the target file to download and display. Since pdf.mjs is imported by viewer.html an...

6.9CVSS6.8AI score0.00271EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/03 4:47 p.m.6 views

CVE-2025-25303 Server-Side Request Forgery (SSRF) in MouseTooltipTranslator

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...

6.9CVSS0.00271EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

MouseTooltipTranslator 代码问题漏洞

MouseTooltipTranslator is a mouse hover instantly translates any language Chrome extension by daniel k individual developer. A code issue vulnerability exists in MouseTooltipTranslator that stems from a pdf.mjs script that uses URL parameters to download and display files, which could lead to an...

6.9CVSS6.9AI score0.00271EPSS
Exploits0References5
Rows per page
Query Builder