https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:43:03.030773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193492 EUVD-2026-193492 2026-10-05T22:43:03.083005+00:00 EUVD-2026-193492 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9329 fkie_cve-2024-9329 2026-10-05T22:43:03.083054+00:00

In Eclipse Glassfish versions before 7.0.17, The Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is '/management/domain'. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.

 https://cve.radiocsirt.org/vuln/ghsa-jq3f-mfmg-747x GHSA-jq3f-mfmg-747x — Eclipse Glassfish improperly handles http parameters 2026-10-05T22:43:03.083104+00:00

Affected: Maven: org.glassfish.main.admin:rest-service

In Eclipse Glassfish versions before 7.0.17, the Host HTTP parameter could cause the web application to redirect to the specified URL, when the requested endpoint is `/management/domain`. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.