X loads tweet links in a webview without a tap, user says
A site owner says X referrals rose from people who only opened a tweet and never clicked the link.
Stories per day · 30 days
1 RSS
5 stories, newest first · one card per story
Stories tagged #webview
Capacitor Vulnerability Lets Remote Content Run With Full App Origin Trust
CVE-2026-103922 lets attacker-controlled content run with full origin trust inside Capacitor Android and iOS apps.
2
GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws
GitHub’s AI security agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.
2
GitHub AI Agent Uncovers 24 Android App Vulnerabilities
GitHub's AI audit agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.
1
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
CERT/CC discloses three stored XSS flaws in Readwise Reader Android 8.7.2 that can run JavaScript in WebView.