https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:21:50.586246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36905 CVE-2020-36905 — FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API 2026-10-09T10:21:50.587630+00:00

Affected: FIBAR GROUP S.A. Home Center 3, FIBAR GROUP S.A. Home Center 2, FIBAR GROUP S.A. Home Center Lite

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.