Lucene search
+L

232 matches found

Kitploit
Kitploit
•added 2026/10/05 3:21 p.m.•12 views

skype-log-viewer

skype-log-viewer 无需Skype即可下载和查看Skype历史 该程序允许您查看所有Skype聊天记录,并轻松将其导出为文本文件。 它能正确按对话组织记录,确保群组对话不会与一对一聊天混在一起。 功能 下载Skype日志 损坏的数据库支持 更改导出格式 按Skype中的对话组织 代码许可 GNU GPL v2 内容许可 Creative Commons 3.0 BY-SA 行为准则 尊重每一位成员。...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97673

The Diba Carousel Slider adds a Bootstrap carousel slider block that can be used directly without creating a View or custom integration. When the "Allow HTML description" option is enabled, slide descriptions are rendered using the raw stored field value instead of the field's rendered output. Th...

5.9AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/07/20 10:04 p.m.•26 views

EUVD-2026-42311

protobufjs: Text Format string map parsing can mutate returned map object prototype...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/07/20 10:04 p.m.•21 views

protobufjs: Text Format string map parsing can mutate returned map object prototype

Summary The protobuf.js text format extension parsed string-keyed map entries using ordinary property assignment. A text-format map entry with key proto could therefore change the prototype of the returned map object instead of creating an own map entry. This affected the optional Text Format...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/20 10:04 p.m.•16 views

GHSA-JFJ6-75FJ-8934 protobufjs: Text Format string map parsing can mutate returned map object prototype

Summary The protobuf.js text format extension parsed string-keyed map entries using ordinary property assignment. A text-format map entry with key proto could therefore change the prototype of the returned map object instead of creating an own map entry. This affected the optional Text Format...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/07/14 6:05 p.m.•17 views

CVE-2026-62641

A flaw was found in Roundcube Webmail. The TNEF Transport Neutral Encapsulation Format decoder, which handles winmail.dat files, is vulnerable to a denial of service. A remote attacker could send a specially crafted compressed-RTF Rich Text Format file, causing the decoder to consume excessive...

6.5CVSS5.7AI score0.00467EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/14 4:17 p.m.•16 views

DEBIAN-CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

6.5CVSS5.7AI score0.00467EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/14 4:17 p.m.•24 views

CVE-2026-62641

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size...

6.5CVSS5.7AI score0.00467EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/07/10 10:25 a.m.•20 views

CVE-2026-59876

A flaw was found in protobufjs. The Text Format extension, responsible for compiling protobuf definitions into JavaScript functions, improperly parsed string-keyed map entries. This allowed a specially crafted map entry with the key proto to modify the prototype of the returned map object. An...

4.8CVSS6.5AI score0.00349EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/08 4:16 p.m.•34 views

CVE-2026-59876

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS0.00349EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/08 3:31 p.m.•57 views

CVE-2026-59876 protobufjs: Text Format string map parsing can mutate returned map object prototype

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS0.00349EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/07/08 3:31 p.m.•17 views

CVE-2026-59876

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/07/08 3:31 p.m.•86 views

CVE-2026-59876

CVE-2026-59876 affects protobufjs (Text Format extension) where, from 8.2.0 through 8.6.5, string-keyed map entries were parsed via ordinary property assignment, allowing a map entry with key proto to mutate the prototype of the returned map instead of creating an own entry in protobufjs/ext/text...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/08 3:31 p.m.•14 views

CVE-2026-59876 protobufjs: Text Format string map parsing can mutate returned map object prototype

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS6.7AI score0.00349EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/08 3:31 p.m.•16 views

CVE-2026-59876 protobufjs: Text Format string map parsing can mutate returned map object prototype

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS6.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•26 views

PT-2026-56496

Name of the Vulnerable Software and Affected Versions protobufjs versions 8.2.0 through 8.6.4 Description The protobufjs Text Format extension parses string-keyed map entries using ordinary property assignment. This allows a map entry with the key proto to modify the prototype of the returned map...

4.8CVSS6.6AI score0.00349EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/08 12:00 a.m.•1 views

CVE-2026-59876: Improperly Controlled Modification of Object Prototype Attributes

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...

4.8CVSS5.9AI score0.00349EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/06/14 9:06 p.m.•155 views

Exploit for CVE-2022-30190

Explotación de Follina CVE-2022-30190 Follina CVE-2022-3...

9.3CVSS8.2AI score0.99163EPSS
SaveExploits63
NVD
NVD
•added 2026/06/10 6:17 p.m.•26 views

CVE-2026-46642

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary JavaScript in the editor's origin when the file is opened. The vulnerability is not in the label sanitizer which works correctly on the rendering path but in...

6.1CVSS0.00321EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/06/10 5:42 p.m.•16 views

CVE-2026-46642 draw.io: XSS via crafted cell label when opening a .drawio file

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.12, a crafted .drawio file can execute arbitrary JavaScript in the editor's origin when the file is opened. The vulnerability is not in the label sanitizer which works correctly on the rendering path but in...

6.1CVSS6.5AI score0.00321EPSS
SaveExploits1References2
Rows per page
Query Builder