https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:12:14.017358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-32221 cnvd-2017-32221 2026-10-03T05:12:14.105496+00:00 cnvd-2017-32221 https://cve.radiocsirt.org/vuln/euvd-2026-78616 EUVD-2026-78616 2026-10-03T05:12:14.105558+00:00 EUVD-2026-78616 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15362 fkie_cve-2017-15362 2026-10-03T05:12:14.105574+00:00

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.

 https://cve.radiocsirt.org/vuln/ghsa-q9v5-48c9-9r2g GHSA-q9v5-48c9-9r2g 2026-10-03T05:12:14.105609+00:00

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.

 https://cve.radiocsirt.org/vuln/gsd-2017-15362 gsd-2017-15362 2026-10-03T05:12:14.105626+00:00 gsd-2017-15362