16 matches found
EUVD-2026-107681
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-114574
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-114574
A security vulnerability exists in massCodeIO massCode 5.10 within the Local HTTP Service component. Specifically, an unknown function in the file src/main/api/index.ts allows for information disclosure via remote manipulation. The documents indicate that an exploit has been disclosed publicly an...
CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure
A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...
EUVD-2020-29414
Malware in sbrugna...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
@cerebroapp/cerebro-shell (>=1.0.0-alpha.1, <=1.0.0), @cerebroapp/cerebro-ui (>=2.0.0-alpha.3, <=2.0.0-alpha.4) +4 more potentially affected by CVE-2022-26260 via simple-plist (>=1.1.0, <=1.1.1)
simple-plist NPM version =1.1.0, =1.0.0-alpha.1, =2.0.0-alpha.3, =0.1.0, =1.0.143, =1.0.46, =4.0.2-beta.0 Source cves: CVE-2022-26260 Source advisory: GHSA-GFF7-G5R8-MG8M...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
CVE-2020-8548
CVE-2020-8548 (massCode) affects massCode 1.0.0-alpha.6. The vulnerability is an XSS in crafted Markdown text that can result in remote code execution because nodeIntegration in webPreferences is true. The description and connected sources confirm the root cause is lack of proper validation/execu...
CVE-2020-8548
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...
PT-2020-20201
Name of the Vulnerable Software and Affected Versions massCode version 1.0.0-alpha.6 Description The issue allows for XSS via crafted Markdown text, resulting in remote code execution because nodeIntegration in webPreferences is set to true. Recommendations For massCode version 1.0.0-alpha.6,...
MassCode Cross-Site Scripting Vulnerability
massCode is the open source code segment manager. A cross-site scripting vulnerability exists in massCode version 1.0.0-alpha.6, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side code...
CVE-2020-8548: Improper Neutralization of Input During Web Page Generation
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...