https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:49:32.863644+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06801 bdu:2023-06801 2026-10-05T12:49:32.941746+00:00 bdu:2023-06801 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0793 certfr-2023-avi-0793 — De multiples vulnérabilités ont été découvertes dans Progress WS_FTP Server. Certaines d'entre elles permettent à un at… 2026-10-05T12:49:32.941782+00:00 certfr-2023-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-187406 EUVD-2026-187406 2026-10-05T12:49:32.941802+00:00 EUVD-2026-187406 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40047 fkie_cve-2023-40047 2026-10-05T12:49:32.941814+00:00

In WS_FTP Server version prior to 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads.  Once the cross-site scripting payload is successfully stored,  an attacker could leverage this vulnerability to target WS_FTP Server admins with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.

 https://cve.radiocsirt.org/vuln/ghsa-5829-ch6w-2w9q GHSA-5829-ch6w-2w9q 2026-10-05T12:49:32.941846+00:00

In WS_FTP Server version 8.8.0 prior to 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads.  Once the cross-site scripting payload is successfully stored,  an attacker could leverage this vulnerability to target WS_FTP Server admins with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.

 https://cve.radiocsirt.org/vuln/gsd-2023-40047 gsd-2023-40047 2026-10-05T12:49:32.941866+00:00 gsd-2023-40047 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2506 WID-SEC-W-2023-2506 — Progress Software WS_FTP: Mehre Schwachstellen 2026-10-05T12:49:32.941877+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Progress Software WS_FTP ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting und Cross-Site Request Forgery Angriffe durchzuführen.