CVE-2026-7221 TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

EUVD-2026-25978

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

CVE-2026-7221: Server-Side Request Forgery (SSRF)

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to laun...

[ASA-202103-2] wireshark-qt: arbitrary code execution

Arch Linux Security Advisory ASA-202103-2 ========================================= Severity: Medium Date : 2021-03-13 CVE-ID : CVE-2021-22191 Package : wireshark-qt Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1669 Summary ======= The package wireshark-q...

Arbitrary Code Execution

wireshark is vulnerable to arbitrary code execution. The vulnerability exists through some fields in the Wireshark prototree that are double-clickable and passes URLs with arbitrary schemes to the QDesktopServices::openUrl function...

Nextcloud: Nextcloud Desktop Client RCE via malicious URI schemes

Nextcloud Desktop utilizes QT's QDesktopServices::openUrl to open URLs. This function invokes the OS'/Desktop environment's default application to handling the URI scheme and file extension. During the Nextcloud Add Account flow, the server's login website is opened within a native window/WebView...

PT-2020-19728

Name of the Vulnerable Software and Affected Versions MintegralAdSDK versions 0.0.0 and later Description The issue concerns malicious functionality within the MintegralAdSDK that tracks and reports any URL opened by the app, facilitating advertisement attribution fraud. The SDK can remotely...

Path traversal

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

UBUNTU-CVE-2020-11934

It was discovered that snapctl user-open allowed altering the $XDGDATADIRS environment variable when calling the system xdg-open. OpenURL in usersession/userd/launcher.go would alter $XDGDATADIRS to append a path to a directory controlled by the calling snap. A malicious snap could exploit this t...

PT-2020-12932

Name of the Vulnerable Software and Affected Versions snapd versions prior to 2.45.1ubuntu0.2 snapd versions prior to 2.45.1+18.04.2 snapd versions prior to 2.45.1+20.04.2 Description It was discovered that snapctl user-open allowed altering the $XDG DATA DIRS environment variable when calling th...

The vulnerability of the Open URL web browser service provided by Google Chrome, which allows a malicious individual to gain unauthorized access to the system

The vulnerability of the OpenURL service in the Google Chrome web browser is related to errors in filtering the parameters of the Open URL service. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the system...

PT-2019-2916

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 76.0.3809.87 Description The issue is related to errors in filtering parameters of the OpenURL service in Google Chrome, which can allow a remote attacker to gain unauthorized access to the system. Additionally,...

CVE-2018-15670: Improper Input Validation

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that OpenURL is the default URL handler. A navigation request is processed by the default URL handler only if the...

PT-2018-13131

Name of the Vulnerable Software and Affected Versions Bloop Airmail 3 version 3.5.9 Description An issue was discovered where the primary WebView instance in Bloop Airmail 3 for macOS implements a decision policy for navigation actions. This policy allows OpenURL to be the default URL handler, bu...

LastPass Patches Ormandy Remote Compromise Flaw

LastPass has patched a vulnerability in its Firefox add-on found by Google Project Zero researcher Tavis Ormandy that allows attackers complete remote compromise of the password manager, . The divisive Ormandy submitted a bug report on Tuesday to LastPass after a series of tweets hinting at serio...

GOM Player ActiveX Control Buffer Overflow

No description provided by source. $Id: gomopenurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Design/Logic Flaw

The system.openURL function in StoneTrip Ston3D StandalonePlayer aka S3DPlayer StandAlone 1.6.2.4 and 1.7.0.1 and WebPlayer aka S3DPlayer Web 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument the sURL argument...

VulnCheck KEV: CVE-2007-5779

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

Buffer overflow

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...

CVE-2007-5779: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the GomManager GomWeb Control ActiveX control in GomWeb3.dll 1.0.0.12 in Gretech Online Movie Player GOM Player 2.1.6.3499 allows remote attackers to execute arbitrary code via a long argument to the OpenUrl method...