https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:48:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54306 EUVD-2026-54306 https://cve.radiocsirt.org/vuln/euvd-2026-54306 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11354 <p>The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.</p> <p>The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11354 https://cve.radiocsirt.org/vuln/ghsa-hx6h-52mp-q9jp <p>The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.</p> <p>The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.</p> https://cve.radiocsirt.org/vuln/ghsa-hx6h-52mp-q9jp https://cve.radiocsirt.org/vuln/gsd-2019-11354 gsd-2019-11354 https://cve.radiocsirt.org/vuln/gsd-2019-11354