CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

EUVD-2021-14820

Malware in sbrugna...

Malicious code in twinkle-abide-fit011-project (npm)

The package twinkle-abide-fit011-project was found to contain malicious code...

Malicious code in twinkle-cascade-sqe614-project (npm)

The package twinkle-cascade-sqe614-project was found to contain malicious code...

MAL-2025-37380 Malicious code in twinkle-cascade-sqe614-project (npm)

The package twinkle-cascade-sqe614-project was found to contain malicious code...

MAL-2025-37379 Malicious code in twinkle-abide-fit011-project (npm)

The package twinkle-abide-fit011-project was found to contain malicious code...

Twinkle Toes Software Booked 输入验证错误漏洞

Twinkle Toes Software Booked is a simple yet powerful appointment scheduling solution from Twinkle Toes Software, USA. An input validation error vulnerability exists in versions of Twinkle Toes Software Booked prior to 3.3, which stems from its mishandling of user-supplied data resulting in...

JVN#75063798: Booked vulnerable to open redirect

Booked provided by Twinkle Toes Software contains an open redirect vulnerability CWE-601. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the software Update the...

CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

Command injection

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28119

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

CVE-2021-28119

Twinkle Tray (twinkle-tray) up to version 1.13.3 is affected. A remote attacker can trigger remote command execution by sending a crafted IPC message to the exposed ipcRenderer IPC interface, which invokes the dangerous openExternal API. The issue is documented across multiple sources (NVD, Red H...

CVE-2021-28119: Undefined Security Weakness

Twinkle Tray aka twinkle-tray through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

PT-2021-17753

Name of the Vulnerable Software and Affected Versions: Twinkle Tray aka twinkle-tray versions 1.13.3 and earlier Description: The issue allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the...

Xander Frangos twinkle-tray 安全漏洞

Xander Frangos twinkle-tray is an open source application by Xander Frangos. It provides a function to manage the brightness level of multiple monitors. A security vulnerability exists in Xander Frangos twinkle-tray through 1.13.3, which can be exploited by an attacker to potentially send a craft...

Twinkle Light PDF Converter has a Denial of Service Vulnerability

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. A denial of service vulnerability exists in Scintillate PDF Converter. An...

Twinkle Twinkle Little Star - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Twinkle Twinkle Little Star published at the 'play' market has multiple vulnerabilities...