EUVD-2026-26839

A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/urlauthbox.cpp of the component Bot API. The manipulation of the argument loginurl leads to null pointer dereference. It is...

CVE-2026-7701

Telegram Desktop

Telegram Desktop 安全漏洞

Telegram Desktop is the desktop version of Telegram’s open-source instant messaging mobile application. Versions of Telegram Desktop prior to 6.7.5 contained a security vulnerability. This vulnerability stemmed from the function RequestButton in the Bot API component, specifically the handling of...

EUVD-2018-3580

Malware in sbrugna...

CVE-2025-4223 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...

LibreHealth 2.0.0 Remote Code Execution Exploit

Exploit Title: LibreHealth v2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Using: Python 2.7.17...

Design/Logic Flaw

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553

SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...

CVE-2018-11553

The CVE-2018-11553 entry concerns the SGIN.CN xiangyun platform where an XSS vulnerability exists in login.php accessible via the login_url parameter. Connected sources describe a cross-site scripting flaw affecting SGIN.CN xiangyun platform, with mentions that version 9.4.1 (and the CVE listing ...