Search: “javascript”

524 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 2062 Vulnerability 1229 Exploit / PoC 533 Ransomware 333 Threat actor 297 Data breach 242 Phishing & fraud 211 Industry 68 Policy & legal 56 Research 38 Advisory 36 AI tools & infra 32 AI safety & security 17 AI research 7

SeverityAll critical 1289 high 2515 medium 1077 low 227 info 63

Palo Alto Networks Discovers Two Adobe Reader Privileged JavaScript Zero

Palo Alto Unit 42Jul 3, 01:11 UTC · Jul 3, 2020Exploit / PoC CVE-2016-6957 CVE-2016-6958

60

The Acrobat JavaScript Blocklist Framework

Cisco TalosJan 20, 17:56 UTC · Jan 20, 2010Exploit / PoC in the wildCVE-2008-2992 CVE-2009-0927 CVE-2009-1493+5 CVEs

60

jQuery JavaScript library flaw opens exposes hundreds of millions of sites

Security AffairsApr 22, 17:56 UTC · Apr 22, 2019Exploit / PoC CVE-2019-113581

60

Known Unknowns: The "Don't Do That" Rules

Cisco TalosMay 6, 15:46 UTC · May 6, 2010Exploit / PoC

45

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero

The Hacker NewsMar 23, 17:42 UTC · Mar 23, 2026Exploit / PoC CVE-2026-20700 CVE-2025-43529 CVE-2025-14174+3 CVEs

60

JavaScript attack aimed to reroute bitcoin transactions

CyberScoopNov 7, 20:17 UTC · Nov 7, 2018Exploit / PoC in the wild

60

Zerodium Offers $1 Million for Tor Browser 0

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2017Exploit / PoC

60

Expert released PoC for Outlook for Android flaw addressed by Microsoft

Security AffairsJun 23, 08:12 UTC · Jun 23, 2019Exploit / PoC CVE-2019-1105

60

Here's why Google is forcing JavaScript use on its sign

CyberScoopNov 1, 14:45 UTC · Nov 1, 2018Exploit / PoC in the wild

60

Attackers exploit critical Flowise flaw CVE-2025

Security AffairsApr 7, 20:16 UTC · Apr 7, 2026Exploit / PoC in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

Google addressed the tenth actively exploited Chrome zero

Security AffairsAug 26, 22:59 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7965 CVE-2024-7971 CVE-2024-5274+7 CVEs

60

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Mysterious hackers ingenuously reveal two Zero

Security AffairsMay 16, 11:49 UTC · May 16, 2018Exploit / PoC CVE-2018-4990 CVE-2018-8120

60

Zerodium is offers $1 Million for Tor Browser Exploits

Security AffairsNov 4, 09:24 UTC · Nov 4, 2017Exploit / PoC

60

The anatomy of Flashfake. Part 2

Kaspersky SecurelistMay 24, 10:27 UTC · May 24, 2012Exploit / PoC

60

New Chrome Zero-Day

Schneier on SecuritySep 10, 11:04 UTC · Sep 10, 2024Exploit / PoC CVE-2024-7971

60

Google addressed the ninth actively exploited Chrome zero

Security AffairsAug 26, 22:50 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7971 CVE-2024-0519 CVE-2024-2887+6 CVEs

60

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play

Help Net SecurityOct 7, 11:57 UTC · Oct 7, 2020Exploit / PoC in the wild

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60

Chrome 0-day exploit CVE-2019

Kaspersky SecurelistNov 1, 16:00 UTC · Nov 1, 2019Exploit / PoC CVE-2019-13720

60

Prototype Pollution flaw discovered in all versions of Lodash Library

Security AffairsJul 9, 17:50 UTC · Jul 9, 2019Exploit / PoC CVE-2019-10744

60

PoC Released for Outlook Flaw that Microsoft Patched 6 Month After Discovery

The Hacker NewsJun 22, 16:59 UTC · Jun 22, 2019Exploit / PoC CVE-2019-1105

60

Zerodium disclose exploit for NoScript bug in version 7 of Tor Browser

Security AffairsSep 11, 07:57 UTC · Sep 11, 2018Exploit / PoC

60

Samsung Android Browser is affected by a critical SOP bypass issue, a Metasploit exploit code is available

Security AffairsDec 29, 16:14 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser

The Hacker NewsDec 29, 12:26 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Experts at ZDI reported two critical Zero

Security AffairsAug 22, 07:57 UTC · Aug 22, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

The msvidctl Internet Explorer 0day

Kaspersky SecurelistJul 7, 19:58 UTC · Jul 7, 2009Exploit / PoC in the wild

60

Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13

The Hacker NewsMar 26, 10:55 UTC · Mar 26, 2026Exploit / PoC in the wildCVE-2024-23222 CVE-2022-48503 CVE-2023-43000+9 CVEs

60

Google fixes eighth actively exploited Chrome zero

Security AffairsMay 24, 13:13 UTC · May 24, 2024Exploit / PoC in the wildCVE-2024-5274 CVE-2024-0519 CVE-2024-2887+5 CVEs

60

Nation State Hackers Exploiting Zero

The Hacker NewsOct 26, 03:42 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Microsoft Finds Account Takeover Bug in TikTok

Infosecurity MagazineSep 1, 09:50 UTC · Sep 1, 2022Exploit / PoC in the wildCVE-2022-28799

60

Do not use Tails OS until a flaw in the bundled Tor Browser will be fixed

Security AffairsMay 26, 10:31 UTC · May 26, 2022Exploit / PoC CVE-2022-1802 CVE-2022-1529

60

PuzzleMaker attacks with Chrome zero

Kaspersky SecurelistJun 8, 17:32 UTC · Jun 8, 2021Exploit / PoC CVE-2021-31955 CVE-2021-31956 CVE-2021-21220+1 CVEs

60

Flaw in popular NodeJS 'express-fileupload' module allows DoS attacks and code injection

Security AffairsAug 5, 08:00 UTC · Aug 5, 2020Exploit / PoC CVE-2020-7699

50

Security flaws allowed hijacking any TikTok account

Security AffairsJan 8, 13:27 UTC · Jan 8, 2020Exploit / PoC

60

Using steganography to obfuscate PDF exploits

Security AffairsJan 27, 07:00 UTC · Jan 27, 2019Exploit / PoC CVE-2013-3346

60

Two Critical Zero

The Hacker NewsAug 21, 18:05 UTC · Aug 21, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

Attackers can siphon data from Splunk Enterprise if an authenticated user visits a malicious webpage

Security AffairsApr 3, 07:47 UTC · Apr 3, 2017Exploit / PoC CVE-2017-5607

50

ASLR Protection could be bypassed by visiting a website.Millions of devices at risk

Security AffairsFeb 17, 11:06 UTC · Feb 17, 2017Exploit / PoC CVE-2017-5925 CVE-2017-5926 CVE-2017-5927+1 CVEs

60