https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:44:01 +0000 https://cve.radiocsirt.org/vuln/cve-2026-24490 <p><strong>Affected:</strong> MobSF Mobile-Security-Framework-MobSF</p> <p>MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting (XSS) vulnerability in MobSF&#39;s Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim&#39;s browser session by uploading a malicious APK. The `android:host` attribute from `&lt;data android:scheme=&#34;android_secret_code&#34;&gt;` elements is rendered in HTML reports without sanitization, enabling session hijacking and account takeover. Version 4.4.5 fixes the issue.</p> <p><strong>Affected:</strong> MobSF Mobile-Security-Framework-MobSF</p> <p>MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting (XSS) vulnerability in MobSF&#39;s Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim&#39;s browser session by uploading a malicious APK. The `android:host` attribute from `&lt;data android:scheme=&#34;android_secret_code&#34;&gt;` elements is rendered in HTML reports without sanitization, enabling session hijacking and account takeover. Version 4.4.5 fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-24490