Lucene search
+L

6 matches found

Kitploit
Kitploit
added 2026/08/25 4:26 a.m.4 views

viber-desktop-html-injection

Viber Desktop — Injection HTML CVE-2025-55996 CVE: CVE-2025-55996 Découvreur : Thaw Khant Cycbake Produit : Viber Desktop Affecté : Viber Desktop 25.6.0 et possiblement versions antérieures Résumé Le gestionnaire de liens profonds de Viber Desktop viber://forward?text= peut restituer du HTML non...

6.3CVSS5.2AI score0.00191EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/02 12:00 a.m.9 views

Cursor 操作系统命令注入漏洞

Cursor is an AI code editor from Cursor open source. An operating system command injection vulnerability exists in Cursor versions 1.17 through 1.2, which stems from an information disclosure in the MCP deep link handler that could lead to arbitrary system command execution...

9.6CVSS7.4AI score0.00367EPSS
SaveExploits0References3
OSV
OSV
added 2018/12/31 11:29 p.m.25 views

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

9.8CVSS6.9AI score
SaveExploits0References1
Prion
Prion
added 2018/12/31 11:29 p.m.24 views

Remote code execution

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

7.5CVSS9.4AI score0.02332EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/12/31 11:29 p.m.21 views

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

9.8CVSS9.5AI score0.02332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/12/31 11:00 p.m.32 views

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

9.5AI score0.02332EPSS
SaveExploits0References1
Rows per page
Query Builder