EUVD-2025-4267

Malicious code in bioql PyPI...

CVE-2024-9285

CVE-2024-9285 affects Tu Yafeng Via Browser for Android up to version 5.9.0. The issue stems from how the Javascript Bridge component is processed, enabling a remote attacker to trigger a cross-site scripting vulnerability. This is described across multiple sources, with public disclosure and a r...

Viayoo Via Browser 代码注入漏洞

Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A code injection vulnerability exists in Viayoo Via Browser version 5.9.0 and prior versions, which stems from improper handling of the Javascript Bridge component...

PT-2025-8972 · Tu Yafeng · Via Browser

Name of the Vulnerable Software and Affected Versions: Tu Yafeng Via Browser versions up to 5.9.0 Description: A problem was found in the Javascript Bridge component of Tu Yafeng Via Browser, which can lead to cross-site scripting. The attack may be initiated remotely. The issue affects some...

CVE-2024-9285: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue affects some unknown processing of the component Javascript Bridge. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-57608

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

CVE-2024-57608

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

Viayoo Via Browser 安全漏洞

Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A security vulnerability exists in Viayoo Via Browser version 6.1.0, which can be exploited for remote code execution via the mark.via...

CVE-2024-57608

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

CVE-2024-57608

A security vulnerability in Via Browser 6.1.0 , a lightweight Android web browser by Viayoo, allows a remote attacker to achieve remote code execution . The flaw originates from the mark.via.Shell component, which is identified as involving the improper neutralization of special elements used in ...

CVE-2024-57608

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...

CVE-2024-57608: Improper Neutralization of Special Elements used in a Command

An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...