CVE-2026-73225: Improper Limitation of a Pathname to a Restricted Directory

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to write attacker-controlled content outside the selected download directory because recursive transfers in...

GetSimpleCMS 跨站脚本漏洞

GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS version v3.4.0a, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...