https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:21:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-195447 EUVD-2026-195447 https://cve.radiocsirt.org/vuln/euvd-2026-195447 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48387 <p>TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution.</p> <p>TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-48387 https://cve.radiocsirt.org/vuln/ghsa-g7qw-4p9h-v9vx <p>TAIWAN-CA(TWCA) JCICSecurityTool&#39;s Registry-related functions have insufficient filtering for special characters. An unauthenticated remote attacker can inject malicious script into a webpage to perform XSS (Stored Cross-Site Scripting) attack.</p> <p>TAIWAN-CA(TWCA) JCICSecurityTool&#39;s Registry-related functions have insufficient filtering for special characters. An unauthenticated remote attacker can inject malicious script into a webpage to perform XSS (Stored Cross-Site Scripting) attack.</p> https://cve.radiocsirt.org/vuln/ghsa-g7qw-4p9h-v9vx https://cve.radiocsirt.org/vuln/gsd-2023-48387 gsd-2023-48387 https://cve.radiocsirt.org/vuln/gsd-2023-48387