
CVE-2026-32722
Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata
educationpapers-researchpenetration-testing+3
16 months ago

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

Proof-of-concept exploit for CVE-2025-15556, demonstrating update integrity bypass in Notepad++ WinGUp updater via MITM proxy or DNS spoofing,…