EUVD-2026-107681

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574

A security vulnerability exists in massCodeIO massCode 5.10 within the Local HTTP Service component. Specifically, an unknown function in the file src/main/api/index.ts allows for information disclosure via remote manipulation. The documents indicate that an exploit has been disclosed publicly an...

EUVD-2020-29414

Malware in sbrugna...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

@cerebroapp/cerebro-shell (>=1.0.0-alpha.1, <=1.0.0), @cerebroapp/cerebro-ui (>=2.0.0-alpha.3, <=2.0.0-alpha.4) +4 more potentially affected by CVE-2022-26260 via simple-plist (>=1.1.0, <=1.1.1)

simple-plist NPM version =1.1.0, =1.0.0-alpha.1, =2.0.0-alpha.3, =0.1.0, =1.0.143, =1.0.46, =4.0.2-beta.0 Source cves: CVE-2022-26260 Source advisory: GHSA-GFF7-G5R8-MG8M...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

CVE-2020-8548

CVE-2020-8548 (massCode) affects massCode 1.0.0-alpha.6. The vulnerability is an XSS in crafted Markdown text that can result in remote code execution because nodeIntegration in webPreferences is true. The description and connected sources confirm the root cause is lack of proper validation/execu...

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

PT-2020-20201

Name of the Vulnerable Software and Affected Versions massCode version 1.0.0-alpha.6 Description The issue allows for XSS via crafted Markdown text, resulting in remote code execution because nodeIntegration in webPreferences is set to true. Recommendations For massCode version 1.0.0-alpha.6,...

MassCode Cross-Site Scripting Vulnerability

massCode is the open source code segment manager. A cross-site scripting vulnerability exists in massCode version 1.0.0-alpha.6, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side code...

CVE-2020-8548: Improper Neutralization of Input During Web Page Generation

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...