https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:08:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-30013 EUVD-2026-30013 https://cve.radiocsirt.org/vuln/euvd-2026-30013 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37840 <p>aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).</p> <p>aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37840 https://cve.radiocsirt.org/vuln/ghsa-r4vq-r3rv-8p3p <p>aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).</p> <p>aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).</p> https://cve.radiocsirt.org/vuln/ghsa-r4vq-r3rv-8p3p https://cve.radiocsirt.org/vuln/gsd-2021-37840 gsd-2021-37840 https://cve.radiocsirt.org/vuln/gsd-2021-37840