3553 matches found
EUVD-2025-34717
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment...
CVE-2025-62585
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment...
CVE-2025-62585
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment...
CVE-2025-61536
FelixRiddle dev-jobs-handlebars 1.0 is vulnerable to an unverified password change issue because it generates absolute password-reset (magic) links using the untrusted req.headers.host header while forcing the http:// scheme. An attacker capable of controlling the Host header—or exploiting a misc...
Dev jobs handlebars 安全漏洞
Dev jobs handlebars is a job search program by Felix Individual Developers. A security vulnerability exists in Dev jobs handlebars version 1.0 that stems from the use of an untrusted req.headers.host header to generate an absolute password reset link and force the use of an http scheme, which cou...
CVE-2025-62585: Improperly Implemented Security Check for Standard
Whale browser before 4.33.325.17 allows an attacker to bypass the Content Security Policy via a specific scheme in a dual-tab environment...
CVE-2025-61536
FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset magic links using the untrusted req.headers.host header and forces the http:// scheme. An attacker who can control the Host header or exploit a misconfigured proxy/load-balancer that forwards the header unchanged can cause reset lin...
CVE-2025-62186
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...
CVE-2025-62186
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...
CVE-2025-62186
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.3
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Process Mining 2.0.3 Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to...
EUVD-2017-8713
Malware in sbrugna...
EUVD-2013-2255
Malware in sbrugna...
EUVD-2014-7749
Malware in sbrugna...
EUVD-2015-5781
Malware in sbrugna...
EUVD-2015-1352
Malware in sbrugna...
EUVD-2016-2722
Malware in sbrugna...
EUVD-2018-7538
Malware in sbrugna...