CVE-2026-0618

A Cross-site Scripting (XSS) vulnerability exists in Devolutions PowerShell Universal due to improper input neutralization during web page generation. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users, potentially leading to malicious code execution wit...

CVE-2025-66027 Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.6, an information disclosure vulnerability exposes participant details, including names and email addresses through the /api/trpc/polls.get,polls.participants.list endpoint, even when Pro privacy features are enabled...