https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:45:03.424443+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185877 EUVD-2026-185877 2026-10-18T08:45:03.426968+00:00 EUVD-2026-185877 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43609 fkie_cve-2021-43609 2026-10-18T08:45:03.427007+00:00

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within the order_by_for_ticket function in app/models/reporting/database_query.rb allows an authenticated attacker to execute arbitrary SQL commands via the sort parameter. This can be leveraged to leak local files from the host system, leading to remote code execution (RCE) through deserialization of malicious data.

 https://cve.radiocsirt.org/vuln/ghsa-7j49-vjx9-cwp7 GHSA-7j49-vjx9-cwp7 2026-10-18T08:45:03.427076+00:00

An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within the order_by_for_ticket function in app/models/reporting/database_query.rb allows an authenticated attacker to execute arbitrary SQL commands via the sort parameter. This can be leveraged to leak local files from the host system, leading to remote code execution (RCE) through deserialization of malicious data.

 https://cve.radiocsirt.org/vuln/gsd-2021-43609 gsd-2021-43609 2026-10-18T08:45:03.427098+00:00 gsd-2021-43609