527 matches found
study-turbolinks-link
Uso de JavaScript https://github.com/turbolinks/turbolinksapi-reference root@kitploit: Turbolinks.visit'/home/two' // default is advance. Turbolinks.visit'/home/two', action: 'advance' Turbolinks.visit'/home/two', action: 'replace'...
CVE-2015-3073
CVE-2015-3073 Esta vulnerabilidad permite a atacantes remotos omitir las restricciones de la API en instalaciones vulnerables de Adobe Reader. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que la víctima debe visitar una página maliciosa o abrir un archivo malicioso...
MGASA-2026-0232 Updated nats-server packages fix security vulnerabilities
nats-server and its dependencies are updated to fix CVE-2025-30215 Missing access controls for JS API in multi-tenancy...
Improper Control of Dynamically-Managed Code Resources
Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources through the WebAssembly.promising and WebAssembly.Suspending JSPI APIs in...
CVE-2026-44225
Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pulpy injects a pulpy.fs JavaScript API into every packaged web application, giving it access to the host filesystem. A validateFsPath function is supposed to sandbox this access, but its blocklist i...
CVE-2018-19446
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.createDataObject is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19449
A File Write can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API Doc.exportAsFDF is used. An attacker can leverage this to gain remote code execution...
CVE-2018-19445
A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031 when the JavaScript API app.launchURL is used. An attacker can leverage this to gain remote code execution...
CVE-2024-39772
Mattermost Desktop App versions =5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs...
EUVD-2015-4465
Malware in sbrugna...
EUVD-2015-7519
Malware in sbrugna...
EUVD-2015-4455
Malware in sbrugna...
EUVD-2015-3153
Malware in sbrugna...
EUVD-2015-3150
Malware in sbrugna...
EUVD-2015-6658
Malware in sbrugna...
EUVD-2015-4472
Malware in sbrugna...
EUVD-2015-4471
Malware in sbrugna...
EUVD-2016-2146
Malware in sbrugna...