CVE-2025-20246

CVE-2025-20246 – Cisco Webex XSS vulnerability : The connected sources confirm a cross-site scripting flaw in Cisco Webex caused by improper filtering of user input, exploitable when a user clicks a malicious link. The CVE entry notes unauthenticated, remote access with network attack vector and ...

Remote code execution

Home assistant is an open source home automation. Home Assistant server does not set any HTTP security headers, including the X-Frame-Options header, which specifies whether the web page is allowed to be framed. The omission of this and correlating headers facilitates covert clickjacking attacks...