Search: “javascript”

970 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 443 Vulnerability 348 Ransomware 126 Data breach 87 Threat actor 77 Malware 74 Phishing & fraud 11 Advisory 8 Policy & legal 3 Model release 1 AI safety & security 1 AI industry 1 AI research 1 Research 1

SeverityAll critical 973 high 196 medium 9 low 0 info 4

Palo Alto Networks Discovers Two Adobe Reader Privileged JavaScript Zero

Palo Alto Unit 42Jul 3, 01:11 UTC · Jul 3, 2020Exploit / PoC CVE-2016-6957 CVE-2016-6958

60

RiskIQ JavaScript Threats Module protects orgs' high-traffic payment pages from JavaScript attacks

Help Net SecurityAug 1, 00:00 UTC · Aug 1, 2019Data breach

60

The Acrobat JavaScript Blocklist Framework

Cisco TalosJan 20, 17:56 UTC · Jan 20, 2010Exploit / PoC in the wildCVE-2008-2992 CVE-2009-0927 CVE-2009-1493+5 CVEs

60

Take a walk on the client side: The importance of front-end JavaScript security assessments

Help Net SecurityMar 9, 20:14 UTC · Mar 9, 2023Data breach

60

Adobe fixes flaws in Adobe InDesign,Framemaker, Experience Manager

Security AffairsSep 8, 20:43 UTC · Sep 8, 2020Vulnerability CVE-2020-9727 CVE-2020-9728 CVE-2020-9729+15 CVEs

60

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero

The Hacker NewsMar 23, 17:42 UTC · Mar 23, 2026Exploit / PoC CVE-2026-20700 CVE-2025-43529 CVE-2025-14174+3 CVEs

60

Lazarus APT steals cryptocurrency and user data via a decoy MOBA game

Kaspersky SecurelistOct 23, 11:00 UTC · Oct 23, 2024Threat actor CVE-2024-4947

60

JavaScript attack aimed to reroute bitcoin transactions

CyberScoopNov 7, 20:17 UTC · Nov 7, 2018Exploit / PoC in the wild

60

Zerodium Offers $1 Million for Tor Browser 0

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2017Exploit / PoC

60

Microsoft Patch Tuesday

Cisco TalosJun 13, 20:48 UTC · Jun 13, 2017Vulnerability CVE-2017-0283 CVE-2017-0291 CVE-2017-0292+37 CVEs

60

Here's why Google is forcing JavaScript use on its sign

CyberScoopNov 1, 14:45 UTC · Nov 1, 2018Exploit / PoC in the wild

60

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

Attackers exploit critical Flowise flaw CVE-2025

Security AffairsApr 7, 20:16 UTC · Apr 7, 2026Exploit / PoC in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

CERT/CC Warns binary-parser Bug Allows Node.js Privilege

The Hacker NewsJan 27, 14:10 UTC · Jan 27, 2026Vulnerability CVE-2026-1245

60

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor CVE-2023-23397

60

Google addressed the tenth actively exploited Chrome zero

Security AffairsAug 26, 22:59 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7965 CVE-2024-7971 CVE-2024-5274+7 CVEs

60

A Data Exfiltration Attack Scenario: The Porsche Experience

The Hacker NewsJul 28, 11:48 UTC · Jul 28, 2023Exploit / PoC

60

Week in review: Avast breach, deepfakes, VisibleV8 monitors JavaScript in the wild

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2019Data breach

60

Mysterious hackers ingenuously reveal two Zero

Security AffairsMay 16, 11:49 UTC · May 16, 2018Exploit / PoC CVE-2018-4990 CVE-2018-8120

60

Zerodium is offers $1 Million for Tor Browser Exploits

Security AffairsNov 4, 09:24 UTC · Nov 4, 2017Exploit / PoC

60

The anatomy of Flashfake. Part 2

Kaspersky SecurelistMay 24, 10:27 UTC · May 24, 2012Exploit / PoC

60

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Hacker NewsJul 30, 07:40 UTC · Jul 30, 2026Data breach CVE-2026-42897 CVE-2025-66376

60

New Chrome Zero-Day

Schneier on SecuritySep 10, 11:04 UTC · Sep 10, 2024Exploit / PoC CVE-2024-7971

60

Google addressed the ninth actively exploited Chrome zero

Security AffairsAug 26, 22:50 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7971 CVE-2024-0519 CVE-2024-2887+6 CVEs

60

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

The Hacker NewsJun 28, 04:05 UTC · Jun 28, 2024Vulnerability CVE-2024-34102 CVE-2024-2961

60

Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader SaintBot

Palo Alto Unit 42Jun 5, 23:28 UTC · Jun 5, 2024Malware CVE-2017-11882

60

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

The Hacker NewsApr 20, 04:45 UTC · Apr 20, 2023Vulnerability CVE-2023-29199 CVE-2023-30547 CVE-2023-29017+1 CVEs

60

Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript Sandbox

The Hacker NewsOct 11, 11:28 UTC · Oct 11, 2022Vulnerability CVE-2022-36067

60

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play

Help Net SecurityOct 7, 11:57 UTC · Oct 7, 2020Exploit / PoC in the wild

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60

Chrome 0-day exploit CVE-2019

Kaspersky SecurelistNov 1, 16:00 UTC · Nov 1, 2019Exploit / PoC CVE-2019-13720

60

Protecting applications from malicious scripts

Help Net SecurityOct 17, 00:00 UTC · Oct 17, 2018Data breach

60

Zerodium disclose exploit for NoScript bug in version 7 of Tor Browser

Security AffairsSep 11, 07:57 UTC · Sep 11, 2018Exploit / PoC

60

Samsung Android Browser is affected by a critical SOP bypass issue, a Metasploit exploit code is available

Security AffairsDec 29, 16:14 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Critical "Same Origin Policy" Bypass Flaw Found in Samsung Android Browser

The Hacker NewsDec 29, 12:26 UTC · Dec 29, 2017Exploit / PoC CVE-2017-17692

60

Experts at ZDI reported two critical Zero

Security AffairsAug 22, 07:57 UTC · Aug 22, 2017Exploit / PoC CVE-2017-10951 CVE-2017-10952

60

The msvidctl Internet Explorer 0day

Kaspersky SecurelistJul 7, 19:58 UTC · Jul 7, 2009Exploit / PoC in the wild

60

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

Security AffairsJul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-66376

60