https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T14:21:46.086571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-188784 EUVD-2026-188784 2026-10-24T14:21:46.089381+00:00 EUVD-2026-188784 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42471 fkie_cve-2023-42471 2026-10-24T14:21:46.089412+00:00

The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third party application (with no permissions).

 https://cve.radiocsirt.org/vuln/ghsa-c4jf-v948-ghj9 GHSA-c4jf-v948-ghj9 2026-10-24T14:21:46.089445+00:00

The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third party application (with no permissions).

 https://cve.radiocsirt.org/vuln/gsd-2023-42471 gsd-2023-42471 2026-10-24T14:21:46.089463+00:00 gsd-2023-42471