CVE-2026-102539

The Super Productivity todo list app (versions 17.3.0 through 18.13.1 ) contains a vulnerability where the SuperSync end-to-end encryption setup transmits and stores user operations in plaintext before an encryption password is set. This occurs because the system calls sync(true) prematurely, pot...

supersync.com XSS vulnerability

Vulnerable URL: http://supersync.com/tutorials.php?play=1/-///'/"//--...