https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:19:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-253166 EUVD-2026-253166 https://cve.radiocsirt.org/vuln/euvd-2026-253166 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42083 <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42083 https://cve.radiocsirt.org/vuln/ghsa-9c8q-55w7-h67h <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> https://cve.radiocsirt.org/vuln/ghsa-9c8q-55w7-h67h https://cve.radiocsirt.org/vuln/gsd-2021-42083 gsd-2021-42083 https://cve.radiocsirt.org/vuln/gsd-2021-42083