CVE-2026-78997: Improper Neutralization of Input During Web Page Generation

UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...

PT-2019-11660

Name of the Vulnerable Software and Affected Versions: UCWeb UC Browser for Android through 2019-03-26 Description: The issue allows for man-in-the-middle MITM attacks due to the use of HTTP for downloading certain modules related to libpicsel, which are associated with PDF and Microsoft Office...