<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 04:58:18 +0000</lastBuildDate>
    <item>
      <title>CVE-2020-27509</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2020-27509</link>
      <description>&lt;p&gt;Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the &amp;#39;subject&amp;#39; field. The payload executes when the recipient logs into their mailbox.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a specially crafted XSS payload in the &amp;#39;subject&amp;#39; field. The payload executes when the recipient logs into their mailbox.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2020-27509</guid>
    </item>
  </channel>
</rss>
