CVE-2017-20239: Improper Neutralization of Input During Web Page Generation

MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter. Attackers can craft URLs with JavaScript payloads in the hash fragment that are parsed and rendered without...

Dynalon MDwiki 跨站脚本漏洞

Dynalon MDwiki is a lightweight Wiki system built using Markdown for content display and document management, open source in Dynalon. Dynalon MDwiki has a cross-site scripting vulnerability, which stems from insufficient cleanup of malicious code injected through the location hash parameter. This...

MINI-C9MV-FM2X-H9PC

Bulletin has no description...

MINI-XRR7-W75W-X844

Bulletin has no description...

MINI-7MH8-FGF8-W39X

Bulletin has no description...

MINI-29FM-2HWC-47V9

Bulletin has no description...

MINI-Q74X-FFJG-59J4

Bulletin has no description...

MINI-C66C-WXFJ-GC96

Bulletin has no description...

MINI-X54V-63H2-XF6V

Bulletin has no description...

MINI-7PQ7-HM8Q-579Q

Bulletin has no description...

MINI-6CFP-G4VR-8249

Bulletin has no description...

MINI-CMR8-9XR7-2XG5

Bulletin has no description...

MINI-28MF-GCFJ-C84W

Bulletin has no description...

MINI-CJM3-J22M-GR49

Bulletin has no description...

Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data

Hungarian domestic intelligence, the national police in El Salvador, and several U.S. law enforcement and police departments have been attributed to the use of an advertising-based global geolocation surveillance system called Webloc. The tool was developed by Israeli company Cobwebs Technologies...

EUVD-2026-21645

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

CVE-2026-4158

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

CVE-2026-4158 KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the targe...

A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags

Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fetch to locate the item. That encryption protects privacy -- neither the finder nor Apple learns the owner's identity ...

CVE-2026-5055: Uncontrolled Search Path Element

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...