74 matches found
EUVD-2023-46377
Malicious code in bioql PyPI...
EUVD-2024-51399
Malicious code in bioql PyPI...
OpenNext for Cloudflare (opennextjs-cloudflare) has a SSRF vulnerability via /_next/image endpoint
A Server-Side Request Forgery SSRF vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed unauthenticated users to proxy arbitrary remote content via the /next/image endpoint...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2024-44081
In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...
CVE-2024-13185
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2023-41898
Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript execution, limited native code execution, and credential...
CVE-2021-43544
When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. This bug only affects Firefox for Android. Other operating systems are...
CVE-2024-13186
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13185
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13186 MinigameCenter information leakage vulnerability
The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13186
The Vivo MinigameCenter module, a command line interface for rapid development of Vivo mini-games, is vulnerable to information leakage due to insufficient restrictions on loading URLs . This vulnerability affects versions prior to 2.2.4.0 . The flaw could lead to partial information disclosure ....
CVE-2024-13185
The MinigameCenter module, a development interface for Vivo mini-games, contains a vulnerability where insufficient restrictions on loading URLs may lead to partial information disclosure . This issue specifically affects Vivo MinigameCenter versions prior to 2.3.5.0 . While the root cause is ide...
CVE-2024-13173 Health information leakage vulnerability
The health module has insufficient restrictions on loading URLs, which may lead to some information leakage...
CVE-2024-13173
The Vivo Health application (an exercise instruction and health management software) is vulnerable to information leakage due to insufficient restrictions on loading URLs . This security flaw affects versions prior to 4.1.6.33 . The vulnerability allows for partial information disclosure because ...
CVE-2024-44081
In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in clients loading videos from an arbitrary URL if a message from another participant contains a URL encoded in the expected format...
CVE-2024-31393
Dragging Javascript URLs to the address bar could cause them to be loaded, bypassing restrictions and security protections This vulnerability affects Firefox for iOS 124...